LARGE TORSION SUBGROUPS OF SPLIT JACOBIANS OF CURVES OF 

GENUS TWO OR THREE 



EVERETT W. HOWE, FRANCK LEPREVOST, AND BJORN POONEN 

Abstract. We construct examples of families of curves of genus 2 or 3 over Q whose Jacobians 
split completely and have various large rational torsion subgroups. For example, the rational points 
on a certain elliptic surface over P 1 of positive rank parameterize a family of genus-2 curves over 
Q whose Jacobians each have 128 rational torsion points. Also, we find the genus-3 curve 

15625(X 4 + Y 4 + Z A ) - 96914(X 2 F 2 + X 2 Z 2 + Y 2 Z 2 ) = 0, 

whose Jacobian has 864 rational torsion points. 



1. Introduction 

Nearly twenty years ago Mazur settled the question of which groups can occur as the group of 
rational torsion points on an elliptic curve over Q, but the analogous question for Jacobian varieties 
of curves over Q of genus greater than 1 remains open. Most of the work that has been done on this 
question has centered on the problem of finding groups that do occur as rational torsion subgroups 
of Jacobians. Several researchers have produced families of genus-2 curves whose Jacobians contain 
various given groups in their rational torsion (see PUj [ 25 1 , [26|, [33|, and the summary in p9f ) 



while others have constructed families of curves in which the size of the rational torsion subgroup 
of the Jacobian increases as the genus of the curve increases (see ||, |J, p3[ , [24|, 27], p8|] ). The 



largest group of rational torsion heretofore known to exist on the Jacobian of a curve of genus 2 
was a group of order 30; for genus-3 curves, the largest group had order 64. 

In this paper we present many explicit families of curves of genus 2 and 3 whose Jacobians possess 
large rational torsion subgroups. The strategy behind our constructions is to take a product of 
elliptic curves, each with large rational torsion, and to find a curve whose Jacobian is isogenous to 
the given product. Thus it is no surprise that the groups we list occur as torsion groups of abelian 
varieties; rather, the point of interest is that they occur as torsion groups of Jacobian varieties. 

For curves of genus 2, we have the following result: 

Theorem 1 . For every abstract group G listed in the first column of Table there exists a family of 
curves over Q of genus 2, parameterized by the rational points on a non-empty Zariski-open subset 
of a variety of the type listed in the third column, whose Jacobians contain a group of rational points 
isomorphic to G. 

When we say that a family is parameterized by the rational points in a non-empty Zariski open 
subset U of a variety X, we mean in particular that the closure of the image of U in the moduli 
space of genus-2 curves is of the same dimension as X. Also, by "positive rank elliptic surface" 
we mean an elliptic surface over P 1 with positive rank. Note that a family parameterized by the 
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G 


\G\ 


Parameterizing variety 


Z/20Z 


20 


p2 


Z/21Z 


21 


p2 


Z/3Z x Z/9Z 


27 


p2 


Z/30Z 


30 


p2 


Z/35Z 


35 


positive rank elliptic curve 


Z/6Z x Z/6Z 


36 


p2 


Z/3Z x Z/12Z 


36 


p2 


Z/40Z 


40 


positive rank elliptic surface 


Z/45Z 


45 


positive rank elliptic curve 


Z/2Z x Z/24Z 


48 


p2 


Z/7Z x Z/7Z 


49 


pO 


Z/5Z x Z/10Z 


50 


positive rank elliptic surface 


Z/60Z 


60 


positive rank elliptic curve 


Z/63Z 


63 


pO 


Z/8Z x Z/8Z 


64 


p2 


Z/2Z x Z/4Z x Z/8Z 


64 


p2 


Z/6Z x Z/12Z 


72 


positive rank elliptic surface 


Z/2Z x Z/6Z x Z/6Z 


72 


positive rank elliptic surface 


Z/2Z x Z/2Z x Z/24Z 


96 


positive rank elliptic curve 


Z/2Z x Z/2Z x Z/4Z x Z/8Z 


128 


positive rank elliptic surface 



Table 1. Families of curves over 
torsion subgroup of the Jacobian. 



Q of genus 2 such that G is contained in the 



rational points in a non-empty open subset of P° consists of a single curve. We will often refer to 
families parameterized by P 1 and P 2 as 1- and 2-parameter families. 
A similar table expresses our results for curves of genus 3. 

Theorem 2. For every abstract group G listed in the first column of Table^ there exists a family of 
curves over Q of genus 3, parameterized by the rational points on a non-empty Zariski-open subset 
of a variety of the type listed in the third column, whose Jacobians contain a group of rational 
points isomorphic to G. The fourth column of the table indicates whether or not the family consists 
entirely of hyperelliptic curves. 

In Part || of the paper we review the results on elliptic curves that we will need to prove these the- 
orems. In Part || we show how, given a pair of non-isomorphic elliptic curves whose Galois modules 
of 2-torsion points are isomorphic, one can construct explicitly a curve of genus 2 whose Jacobian 
is isogenous to the product of the given elliptic curves. After giving some quick applications of 
the construction to the problems of finding genus-2 curves of low conductor and of high rank, we 
give a modular interpretation of our construction in Section 3J3. The rest of Part || is taken up 
with the proof of Theorem |l[ In Part |I| we begin with another explicit construction: We show in 
Section 41 how one can construct a curve of genus 3 whose Jacobian is isogenous to a product of 
three given elliptic curves, provided that each of the elliptic curves has a rational 2-torsion point, 
that the product of their discriminants is a square, and that a certain explicitly calculable number 
depending on the curves is a square. The remainder of Part || contains the proof of Theorem [2|. 
The reader should note that our verifications of the many entries in Tables [l| and ^ are organized 
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G 


\G\ 


Parameterizing variety 


All hyp.? 


Z/2Z x Z/30Z 


60 


positive rank elliptic curve 


ves 


Z/10Z x Z/10Z 


100 


P 1 


ves 


Z/2Z x Z/8Z x Z/8Z 


128 


positive rank elliptic surface 


ves 

„ 


Z/4Z x Z/4Z x Z/8Z 


128 


P 1 


ves 


Z/4Z x Z/40Z 


160 


positive rank elliptic curve 


no 


Z/2Z x Z/4Z x Z/24Z 


192 


positive rank elliptic curve 


no 


Z/2Z x Z/2Z x Z/2Z x Z/24Z 


192 


positive rank elliptic surface 


ves 


Z/10Z x Z/20Z 


200 


p2 


no 


Z/6Z x Z/6Z x Z/6Z 


216 


positive rank elliptic curve 


no 


Z/4Z x Z/60Z 


240 


positive rank elliptic curve 


no 


Z/4Z x Z/8Z x Z/8Z 


256 


positive rank elliptic curve 


no 


Z/2Z x Z/2Z x Z/8Z x Z/8Z 


256 


p2 


no 


Z/2Z x Z/4Z x Z/4Z x Z/8Z 


256 


p2 


no 


Z/2Z x Z/2Z x Z/2Z x Z/4Z x Z/8Z 


256 


p2 


ves 

J 


Z/2Z x Z/12Z x Z/12Z 


288 


p2 


no 


Z/2Z x Z/2Z x Z/6Z x Z/12Z 


288 


positive rank elliptic surface 


yes 


Z/2Z x Z/2Z x Z/4Z x Z/4Z x Z/8Z 


512 


positive rank elliptic curve 


no 


Z/2Z x Z/2Z x Z/2Z x Z/2Z x Z/4Z x Z/8Z 


512 


P 1 


yes 


Z/6Z x Z/12Z x Z/12Z 


864 


pO 


no 



Table 2. Families of curves over Q of genus 3 such that G is contained in the 
torsion subgroup of the Jacobian. The final column indicates whether or not the 
family consists entirely of hyperelliptic curves. 



not by the sequence of the entries in the tables but rather by the type of argument the verifications 
require. Consequently, the proofs of the theorems are distributed among several sections. 

Throughout the paper, and often without further mention, we will make use of van Hoeij's 
Maple package IntBasis for computing Weierstrass models for genus-1 curves with a rational 
point; Cremona's programs findinf and mwrank for finding points on, and computing ranks of, 
elliptic curves over Q; Mathematica; and especially PARI. 

2. Genus one 

In this section we record facts about torsion of elliptic curves over Q that we will need later. 
Mazur's theorem states that if E is an elliptic curve over Q, then the group of rational torsion 
points on E is isomorphic to Z/A r Z with N < 10 or N = 12, or isomorphic to Z/2Z x Z/2AZ with 
N < 4. For each possibility where the group is not killed by 2, the elliptic curves having that group 
as torsion subgroup form a 1-parameter family. We will need to have an explicit equation for the 
universal curve for each family. For N = 3, this universal elliptic curve is y 2 = x 3 + (x + i) 2 /4 and 
a 3-torsion point is (0, t/2). For the other cases, we copy^ Table 3 in to our Table |. 

Let E l N denote the elliptic curve with a rational A r -torsion point with parameter t, and similarly 
define E\ 2 n- We will need to know something about the field of definition of the 2-torsion points 
on the curves E l N . Therefore we record the discriminant Ajv(i) of E l N modulo squares in Q(t) in 
Table |]. If N is odd, the discriminant Ajv(i) is equal (modulo squares) to the discriminant of the 

1 Actually, we have done a tiny bit more than copy: we have expanded the implicit expressions for the parameters 
b and c in to express b and c in terms of a single parameter t. 
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N or (2,2N) 


b 


c 


4 


t 





5 


t 


t 


6 


t 2 + t 


t 


7 


t 3 -t 2 


t 2 -t 


8 


2t 2 - 3t + 1 


2t 2 - 3t + 1 
t 


9 


t 5 - 2t 4 + 2t 3 - t 2 


t 3 -t 2 


10 


2t 5 - 3t 4 + t 3 


-2t 3 + 3t 2 -t 


(f _ 3^ + 1)2 


f2 _ 3t _|_ i 


12 


12t 6 - 30t 5 + 34i 4 - 2 It 3 + 7t 2 - t 


_6t 4 + 9t 3 - 5t 2 + i 


(t - l) 4 


(i - I) 3 


(2,4) 


t 2 

16 





(2,6) 


-2t 3 + Ut 2 - 22t + 10 


-2t + 10 


( t + 3)2( t _ 3 )2 


(t + 3)(t-3) 


(2,8) 


16t 3 + 16t 2 + 6t + 1 


16i 3 + I6t 2 + 6t + 1 


(8t 2 - l) 2 


2t(4t + l)(8t 2 - 1) 



Table 3. Parameters b, c for the universal elliptic curve y 2 + {l — c)xy — by = x 3 — bx 2 
over Xi(N) or Xi(2,2iV). In each case, (0,0) is a torsion point of maximal order. 



N 


Discriminant Ajy(i) modulo squares 


3 


t(l - 27t) 


4 


16t + l 


5 


t(t 2 - lit - 1) 


6 


(t+l)(9t + l) 


7 


t(t - l)(t 3 - 8t 2 + 5t + 1) 


8 


8t 2 - 8t + 1 


9 


t(t - l)(t 2 - t + l)(t 3 - 6t 2 + 3t + 1) 


10 


(2t - l)(4t 2 - 2t - 1) 


12 


(2t 2 -2t + l)(6t 2 -6t + l) 



Table 4. Discriminant (modulo squares) of the elliptic curve E' 



cubic field obtained by adjoining the coordinates of one 2-torsion point; if iV is even, Ajv(i) is equal 
(modulo squares) to the discriminant of the quadratic field obtained by adjoining the coordinates 
of a non-rational 2-torsion point. 

We will need to know the x-coordinates of the nonzero 2-torsion points on E\ 2 n, at least for 
N = 3 and N = A. These are given in Table |. For N = 4, the point T\ is the one that is 4 times 
a rational 8-torsion point. Note that these ^-coordinates are also valid for the model 

y 2 = x 3 - bx 2 + [(1 - c)x - 6] 2 /4 

obtained by completing the square in y. 
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Curve 


x{T x ) 


<T 2 ) 


x(T 3 ) 


E 2,6 


-2t + 10 


-t 3 + 7t 2 - lit + 5 


-2t 2 + At - 2 


(t + 3)(t-3) 


4(t + 3)(t-3) 2 


(t + 3) 2 (t-3) 


E 2,8 


16t 3 + 12t 2 + 2t 


32t 3 + 24i 2 + 8t + 1 


-32t 4 - 32i 3 - I2t 2 - 2t 


(8t 2 - l) 2 


16t 2 (8t 2 - 1) 


(4t + l) 2 (8t 2 - 1) 



Table 5. The x-coordinates of the 2-torsion points on E 2 



For our work with genus-3 curves, we will require different models of the universal elliptic curves 
E l N for N = 4,6,8,10,12 and E 22N f° r N = 2,3,4; in particular, we will want to have each 
curve written in the form y 2 = x(x 2 + Ax + B), where (x,y) = (0,0) is a specified 2-torsion 
point. Table ^ lists the values of A and B for the curves we will need, as well as the value of the 
number A = A 2 — AB, which differs from the discriminant of the elliptic curve by a factor of 16£> 2 . 
The entries in the table were calculated by completing the square in y for the models of the E 2N 
and E 2 given above, moving a rational 2-torsion point to x = 0, scaling with respect to x to 
clear denominators, and making a linear change of variables in t so as to simplify the resulting 
polynomials. We will refer to these models as Fi N and Ft 2N depending on which universal elliptic 
curve they model. However, there are two essentially different ways of putting the curves E 2 4 and 
E 2 8 into the desired form, because one of the 2-torsion points on these curves is a multiple of a 
point of order 4 while the others are not. We denote the models in which the 2-torsion point at 
x = is a multiple of a 4-torsion point by F 24 and F^ & , and we denote the other models by F 42 
and Fg 2 . 

For convenience, we list in Table the coordinates of a torsion point of maximal order on the 
curves F 2N , F% 2N , and F 2N2 . Also, in Table |8| we give the x-coordinates of the 2-torsion points 
other than (0, 0) on the curves whose 2-torsion points are all rational. In the entries for F^ 2 and 
-Fg 2 , the point labeled T\ is twice a rational 4-torsion point. 

Finally, we note that while there is no universal elliptic curve over the modular curve X(2) there 
is a replacement that will suffice for our purposes. If k is a field of characteristic different from 2, 
then every elliptic curve over k that has all of its 2-torsion defined over k is isomorphic to a twist 
of a specialization of the curve F 22 over k(t) defined by y 2 = x(x 2 + Ax + B), where A = —1 — t 
and B = t. 



3. Genus two 

3.1. Conventions. All curves are supposed to be nonsingular and irreducible unless we specifically 



mention that they might not be. The modular curves we consider in section 3.3 are possibly singular. 
If A is a variety over a field k and if K is an extension field of k, we will denote by Ax the if -scheme 
A x gp ec k Specif . If A is an abelian variety over a field k and N is a positive integer, we will denote 
by A[N] the fc-group scheme that is the kernel of the multiplication-by-iV map on A. 

3.2. Jacobians (2, 2)-isogenous to a product of elliptic curves. In this section we will show 
how one can construct a curve of genus 2 whose Jacobian is (2, 2)-isogenous to a product of two 
given elliptic curves, provided one has an isomorphism of their 2-torsion groups that does not come 
from an isomorphism of elliptic curves. Related results, some of them constructive, have appeared 
in the recent literature — see for example [10], [O], [13|, fl5|| , |?0[ — and in fact the first examples 



of curves like the ones we construct go back to Jacobi. Chapter XXII of |y] provides inroads to the 
older literature on the subject. 

Suppose E and F are elliptic curves over a separably closed field K, and let iV be a positive 
integer not divisible by the characteristic of K. The product of the canonical polarizations on E 
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2JV, (2,2JV), or (2N,2) 


A, B, and A = A 2 - 4B 




A = 2t + 1 


A 


B -t 2 
A = 4t 4 1 




A = 2t 2 4 2 


(2 A) 


B — (t - \) 2 (t 4 l") 2 

a = m 2 




A = —t 2 — Qt — 1 


(4 2) 


B — At(t 4- 1 "l 2 
A = (t- l) 4 




v4 — — 3f 2 -4- 6/ 4- 1 


a 

U 


R — — Ifif 3 

X-J lUd 

A — (Qt 4- l)(t 4 l 1 ) 3 

i_i — yuu i xy ^t/ i x^ 




/I — — 2/ 4 4- 1 ?t 2 4- fi 


(2 6) 


B — (tA- S)(t - 1)(t 4 \) 3 (t - l) 3 
A = 256t 2 




A — 2t 4 4- 4t 2 — 2 


e 

O 


x_> — yb ~r XJ yi xj 




A = 16(2t 2 - l)t 4 




A — t 8 — At 6 4- 22f 4 — At 2 4 1 


(2 8) 


R - 16t 4 ft 4 lWf - l) 4 

J—f JLKJb 1 [/ | X f \ 1/ X f 

A = (t 2 - 2t - l) 2 (t 2 + 2t- l) 2 (t 2 4 l) 4 




A — —2t 8 4 8f 6 4 At 4 4-Rt 2 — 2 


(R 2) 


B — (t 2 — 2t — 'Wit 2 4 2f — iVf 2 4 1 ) 2 (t 4- 1 ) 4 (t - 1 "l 4 
±j — yv £>v x m V \ Lsv x \yv \ 1 1 i l 1 1 yo 1 1 

A = 256t 8 




A = -(2t 2 —2t+ l)(4t 4 - I2t 3 4 6t 2 + 2t — 1) 


10 


J R = 16(t 2 -3t4l)(t-l) 5 t 5 
A = (4t 2 - 2t - l)(2t - l) 5 




A = 24t 8 - 96t 7 4 216t 6 - 312t 5 4 288i 4 - 168i 3 4 60t 2 - 12t + 1 


12 


£ = I6(3t 2 - 3t 4 l) 2 (t - l) 6 t 6 

A = (Qt 2 -6t + l)(2t 2 -2t + l) 3 (2t - l) 6 



Table 6. Parameters A, B for the universal elliptic curve y 2 = x(x 2 4 Ax 4 B) over 
Xi(2iV) or X\(2,2N). The 2-torsion point (0,0) is twice a rational 4-torsion point 
for the entries marked (2,4) and (2,8), and is not for the entries marked (4,2) and 
(8,2). 



and F is a principal polarization A on the product variety A = E x F, and by combining the Weil 
pairings on E[N] and F[N] we get a non-degenerate alternating pairing cn from the iV-torsion 
of A to the group-scheme of iVth roots of unity over K. Suppose G is a sub-group-scheme of 
A[N) that is isotropic with respect to the pairing ejy and that is maximal with respect to this 
property. Then the polarization iVA of A reduces to a principal polarization /x on the quotient 
abelian variety B = A/G (see |32|], Proposition 16.8, p. 135). The polarized variety (B,/j,) will be 
either the polarized Jacobian of a curve over K or the product of two polarized elliptic curves over 
K. Suppose N = 2; in this case it is easy to show that if (B, /i) is a Jacobian then G must be 
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N, (2,27V), or (2iV, 2) 


(x, y)-coordinates 


4 


x = — t 
y = t 


(2 A) 


T — — (t 4 l)(t — I) 

y = 2(t + l)(t-l) 


(A 2) 


x = 2(t 4 1) 

y = 2(t + l)(t-l) 


6 


x = —At 

y = 4t(t + l) 


f2 6) 


x = ft - 31 ft 4- 3") ft - lift 4- 1") 
y = 4(t-3)(t4 3)(t-l)(t4l) 


8 


r — — it 4 1 Wf - I) 
<v — yu ~ ± j yv ± j 

y = 2(t + lf(t-l)t 


f2 8) 


x = —Ait - l)t(t 4 l) 3 

y = A(t- l)t(t 4 l) 3 (i 2 4 l)(t 2 - 2t - 1) 


(8 2) 


x = ft 2 4- lift 2 - 2i — l)(i - lift 4 l") 3 
y = 4(t 2 4 l)(t 2 - 2t - l)(t - l)(t 4 l) 3 t 


10 


x = 4(t-l)(t 2 -3t4l)t 3 

y = A(t- l)(t 2 -3t + l)t 3 (2t - 1) 


12 


x = _4(t-l)(3t 2 -3t4l)t 5 

y = A(t- l)(3t 2 - 3t 4 l)t 5 (2t 2 -2t + l)(2t - 1) 



Table 7. Coordinates of a torsion point of maximal order on the universal curves 



(2,27V) or {2N,2) 


x(Tx) 


*(r 2 ) 


(2,4) 


-(t-1)' 


-(t + i) 2 


(4,2) 


(i + 1) 2 


At 


(2,6) 


(t + 3)(t-l) 3 




(2,8) 


-16t 4 


_( t _l)4( t + 1 )4 


(8,2) 


( t _l)4( t+1 )4 


(t 2 4 2t-l)(t 2 -2t-l)(t 2 4l) 2 



Table 8. The x-coordinates of the 2-torsion points on -F^n an< 4 ^2iV2 other than (0,0). 



the graph of an isomorphism S[JV](if) — ► F[JV](if). Our first result is that the converse of this 
statement is almost true. 

Proposition 3. Let E and F be elliptic curves over a field k whose characteristic is not 2, let K 
be a separable closure of k, let A be the polarized abelian surface Ex F ', and let G C J 4[2](K) be the 
graph of a group isomorphism ip: E[2](K) — > F[2](K). Then G is a maximal isotropic subgroup of 
A[2](K). Furthermore, the quotient polarized abelian variety Ak/G is isomorphic to the polarized 
Jacobian of a curve C over K , unless ip is the restriction to E[2](K) of an isomorphism Ek — ► Fx- 
If ip gives rise to a curve C , then C and the isomorphism Jac C = Ak / G can be defined over k if 
and only if G can be defined over k, if and only if ip is an isomorphism of Galois modules. 
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Proof. All of the proposition except for the final sentence is the special case N = 2 of the results 
of |l5| . The final statement of the proposition follows from standard descent arguments that make 
use of the fact that the automorphism group of C is naturally isomorphic to that of the polarized 
variety Ak/G. □ 

Let k and K be as in Proposition || and let E and F be the elliptic curves over k defined by the 
equations y 2 = f and y 2 = g, respectively, where / and g are separable monic cubic polynomials in 
k[x] with discriminants and A g . Suppose ip is a Galois-module isomorphism E[2](K) — > F[2](K) 
that does not come from an isomorphism Ek — ► Fr. Our next proposition shows how we can use 
/, g, and ip to find a model for the curve C over k that appears in Proposition ||. 

Proposition 4. With notation as above, let ati, a 2 , and a 3 be the roots of f in K and let Pi, 

P 2 , and P 3 be the roots of g in K. Suppose the roots are indexed so that ip((ai,0)) = (Pi,0). The 
numbers a±, b\, a 2 , and b 2 defined by 

a x = (a 3 - a 2 )7(/3 3 - P2) + (a 2 - «i) 2 /(/?2 - Pi) + (<*i - a 3 ) 2 /(pi - Ps) 
h = (Ps - /3 2 ) 2 /(«3 - a 2 ) + (p 2 - Pi) 2 /(a 2 - «i) + (Pi - /3 3 ) 2 /(«i " « 3 ) 
a 2 = ai(P 3 - p 2 ) + a 2 (Pi - Ps.) + a 3 (p 2 - Pi) 
b 2 = Pi(a 3 - a 2 ) + p 2 (ai - a 3 ) + /3 3 (a 2 - «i) 

are nonzero, and the ratios ai/a 2 and 61/62 ore in k. Let A = A g ai/a 2 and let B = Afbi/b 2 . Then 
the polynomial h defined by 

h = -{A(a 2 - ai)(ai - a 3 )x 2 + B(p 2 - pi)(Pi - p 3 )) 

■ (A(a 3 - a 2 )(a 2 - ai)x 2 + B(p 3 - p 2 )(p 2 - Pi)) 

■ (A(ai - a 3 )(a 3 - a 2 )x 2 + B(pi - p 3 )(p 3 - /%)) 

is a separable sextic in k[x], and the polarized Jacobian of the curve C over k defined by y 2 = h is 
isomorphic to the quotient of E x F by the graph oftp. 

Proof. Simple algebra shows that if either ai or a 2 were zero we would have 



But then the automorphism 



a P 2 ~ Pi , Pia 2 - P 2 ai 

P-z = a 3 1 

a 2 — ai a 2 — 011 



P 2 - Pi Pia 2 - p 2 ai 
W: zh z 1 



a 2 — 011 ol 2 — oil 

of Y* l K would take ai to Pi for i = 1, 2, 3 and would also take 00 to 00, and this would mean that 
ip came from the isomorphism Ek —> Fx obtained from contrary to our hypotheses. Therefore 
ai and a 2 are nonzero. It is easy to check that the ratio ai/a 2 is fixed by the action of S 3 that 
permutes the indices of the a's and P's. But the Galois equivariance of the map V shows that 
the action of Gal(K/k) on ai/a 2 factors through this action of S 3 , so ai/a 2 is an element of k. A 
similar argument shows that 61 and b 2 are nonzero and that 61/62 E k. 

The group Gal(K/k) acts on h by permuting its factors, so h is an element of k[x]. The coefficient 
of x 2 in each factor is nonzero, so h is a sextic. To show that h is separable it will be enough to 
show that the polynomial ~g E k[u] defined by 

g = - (A(a 2 - ai)(ai - a 3 )u + B(p 2 - pi)(Pi - p 3 )) 

■ (A(a 3 - a 2 )(a 2 - a x )u + B(p 3 - p 2 )(p 2 - Pi)) 

■ (A(ai - a 3 )(a 3 - a 2 )u + B(pi - p 3 )(p 3 - p 2 )) 
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is separable, because h(x) = g{x 2 ) and the roots of g are nonzero. Let t\ = — (A/B)(b 2 /bi) and let 
t 2 be the element 

bl \ «3 — Ol 2 Ol\ — «3 Ct 2 — OL\ J 

of k. The reader may verify that the automorphism z i— > tiz + t 2 of takes the roots of g to the 
roots of g. The roots of g are distinct by assumption, so the roots of ~g must also be distinct, so g 
is separable. 

Now we turn to the final statement of the proposition. Let F be the elliptic curve over k defined 
by v 2 = g. Once one knows that z i— > t\z + t 2 takes the roots of g to those of g, it is a simple matter 
to verify that the map 

(u,v) i ^ (tiit + i 2 , (A//S 3 )?;) 

provides an isomorphism between F and i 7 . Thus we can define a morphism x~- C — > F of degree 2 
by 

(x,y) ^ {hx 2 + t 2 ,{A f /B 3 )y). 

The involution r of C defined by this double cover is given by (x,y) t— > (—x,y). 
Let -E be the elliptic curve over defined by t> 2 = /, where / G fc[it] is given by 

/ = -{A(a 2 - ai){ai - a 3 ) + B(fa - /?i)(/3i - 3 )u) 

• (A(a 3 - «2)(a2 - ai) + B(fa - (3 2 )(fo - 0i)u) 

■ (A(ai-a 3 )(a 3 -a 2 )+B{{3i-l3 3 )(p 3 -l3 2 )u). 

The a—/3 symmetry in our equations shows that there is an isomorphism E — > E given by 

(it, «) ' ^ (siit + s 2; (A 5 /yl 3 )w), 

where si and S2 are the elements of k defined by exchanging a's and /3's in the definitions of t\ and 
t 2 . Thus we get a A:-morphism 99 : C — > E 1 of degree 2 defined by 

(x, y) ^ (si/x 2 + s 2 , (A g /,4 3 )(y/x 3 )). 

The involution a of C defined by this double cover is given by (x,y) 1— * (—x, —y). 

Let A = E x F, let J be the Jacobian of C, and let uj : ^4 — > J be the morphism 99* x Note 
that the image of ip* in J is fixed by cr*, while the image of x* 1S fixed by r*; since cr*r* = —1, we 
see that uj is an isogeny. Let [i be the canonical polarization of J. The fact that ip has degree 2 
implies that <p*fM(p* is the multiplication-by-2 map on E, and similarly x*^X* 1S the multiplication- 
by-2 map on F; here ~ indicates the dual morphism. If we let A be the product polarization on A 
obtained from the canonical polarizations on E and F, then we have a commutative diagram 

A ^ A 



J J. 

The diagram shows that must have degree four, and its kernel lies in the 2-torsion of A. By using 
the explicit representation of 2-torsion elements of E, F, and J as degree-zero X-divisors on E, F, 
and C that are supported only on Weierstrass points, one may check easily that the graph G of if) 
is contained in kerw, and since #G = #keru;, we must have G = kerw. □ 

Below we give a few quick applications of Proposition |j. First, we exhibit a curve of genus 2 
over Q whose Jacobian has a very small conductor. Mestre Q] proved under standard conjectures 
that the conductor of a ^-dimensional abelian variety over Q must be greater than (10.32) s , so for 
a 2-dimensional variety a conductor of 121 is close to the minimum of 107. 
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Corollary 5. The conductor of the Jacobian of the curve y 2 = —2x 6 — 10x 4 + 26x 2 + 242 is 121. 

Proof. Take E and F to be the modular curves Xi(ll) and Xq(11) over Q. The Q-rational 5- 
isogeny E — > F gives us a Galois-module isomorphism -ip: E[2](Q) — ► F[2](Q), and i\) does not 
come from an isomorphism Eq — > Fq because Eq and -Fq are not isomorphic to one another. 
Applying Proposition |I] to convenient models of E and F and simplifying the resulting equation 
gives us the curve in the statement of the corollary. □ 

Remark. The curve in Corollary || is none other than Xq(22). An isomorphism from the model 

Y 2 = (X 3 + 2X 2 - 4X + 8)(X 3 - 2X 2 + AX - 4) 
for A~o(22) given in |T^] to our curve 

y 2 = _2x 6 - 10x A + 26x 2 + 242 
is given by (x,y) = (1 - A/X, 16Y/X 3 ). 

Our next two results give sufficient conditions for there to be a genus-2 curve whose Jacobian 
is isogenous to the product of a given elliptic curve with itself. (The sufficient conditions given by 
Kani |l(| apply only when k is algebraically-closed.) 

Corollary 6. Suppose E is an elliptic curve over a field k of characteristic p > 2. If j(E) is 
neither nor 1728, then there exists a genus-2 curve over k whose Jacobian is isogenous over k to 
E xE. 

Proof. First suppose that j(E) F p . Let y 2 = f be a Weierstrass equation for E, and let F be 
the elliptic curve over k defined by y 2 = f^ p \ where /W is the polynomial obtained from / by 
replacing every coefficient with its pth power. Note that j{F) = j{E) p ^ j(E) since j{E) F p . 
The Frobenius morphism (x,y) \— * (x p ,y p ) from E to F defines a Galois-module isomorphism 
ip: E[2](K) — > F[2](K). The curves E and F have different j-invariants and so are not isomorphic 
to one another, so Proposition || provides us with the required genus-2 curve. 

Next suppose that j(E) 6 F p . Suppose we could find a Galois-module automorphism -0 of 
E[2](K) other than the identity. Such an automorphism could not come from an automorphism of 
Ek because our assumption on j(E) implies that Ant Ek = {±1}, so Proposition ||] would give us 
a curve whose Jacobian is (2, 2)-isogenous to E x E. Thus we will be done if we can find such a ip. 

If #E[2](k) = 4 then E[2](K) is a trivial Galois module, and we may take if) to be any one of 
the 5 non-trivial automorphisms of E[2](K). 

If #E[2](k) = 2, we may take ip to be the automorphism of E[2](K) that swaps the two non- 
rational points. 

Finally, suppose #E[2](k) = 1. The fact that AutEx = {±1} implies that E has a model of the 
form dy 2 = /, where / G F p [x] and d G k. The 2-torsion points of E are defined over the splitting 
field of /, which in this case is a cyclic cubic extension of k because / G F p [x]. Therefore the 
two group automorphisms of E[2](K) that rotate the nonzero points are actually Galois-module 
isomorphisms, and we have two choices for ip. □ 

In characteristic it is a little more difficult to find such curves C. 

Corollary 7. Let E be an elliptic curve over a field k of characteristic not 2, and suppose End Ek = 
Z. If E contains a k -rational finite subgroup-scheme G that is not the kernel of multiplication-by-N 
for any N , then there exists a genus-2 curve over k whose Jacobian is isogenous over k to E x E. 

Proof. We may assume that the order of G is a prime q. If q = 2, then there is a nonzero fc-rational 
point of order 2, and we may use in Proposition || the isomorphism tp : E[2](K) — ► £J[2](if) that 
interchanges the other 2-torsion points. If q is an odd prime, then the natural isogeny from E to the 
elliptic curve F = E/G over k defines an isomorphism of Galois-modules ip : E[2](K) — > F[2](K). 
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The condition End Ek = Z ensures that Ek and Fx are not isomorphic, so the result again follows 
from Proposition [3|. □ 

Remark. The conclusion of Corollary ^ holds for some elliptic curves in characteristic that do 
not satisfy the corollary's hypotheses. For example, let E be the elliptic curve 

E : y 2 = x 3 — 169x + 845 

over Q. The cubic on the right is irreducible, and has square discriminant 13 4 , so its Galois group 
is A%. Therefore any isomorphism : i£[2](Q) — > £7[2](Q) that rotates the three non-trivial 2- 
torsion points will be defined over Q. Since j(E) ^ 0, such a rotation cannot be the restriction 
of an automorphism of E, so by Proposition |3], we obtain a genus-2 curve over Q whose Jacobian 
is (2, 2)-isogenous over Q to E x E. On the other hand, E is curve 676D1 in which has no 
Q-rational cyclic subgroups. 

We can use Corollary |7| to construct genus-2 curves over Q whose Jacobians have high rank, as 
was also noticed by Stefane Fermigier. 

Corollary 8. The Jacobian of the curve 

y 2 = -1707131824107329945 • (x 2 + 55871769054504519799033274614104129) 

• O 4 - 1086862437115841494920959046499163042x 2 

+3121654577279888882305769763628790308995888274656243920700573254848641) 
has rank 28 over Q. 

Proof. According to the elliptic curve 

E : y 2 = x(x 2 + 2429469980725060x + 275130703388172136833647756388) 
has rank 14, and (0, 0) is a rational 2-torsion point on E. The j-invariant is 

483941743120924000812123996730853715578647268051688786879688 
5250870830712351132421548861849566889806152906127048721 ' 
which is not an integer, so E cannot have complex multiplication. Using Corollary ^ and the 
formulas of Proposition ||, we obtain the desired genus-2 curve over Q whose Jacobian is (2, 2)- 
isogenous to E x E. □ 

3.3. A modular interpretation. One of our goals in this paper is to construct curves over Q 
of genus 2 whose Jacobians have large rational torsion subgroups, and our strategy will be to 
use Proposition ^| to "tie together" two elliptic curves that each have large torsion subgroups. In 
particular, every curve C we construct will come equipped with a (2, 2)-isogeny £xF-> Jac C, 
where E and F have some particular rational torsion structure. We would like to construct the 
moduli space of curves equipped with such isogenies. 

Suppose A; is a field and K is a separable closure of k. Pick a set of elements {Cm '■ M G Z>o} 
of K such that Cm generates the group of Mth roots of unity in K and Cm = C]m f° r an integers 
M,j > 0. By a full level-M structure on an elliptic curve E/K we mean a pair of points (P,Q) 
in E(K) that form a Drinfeld basis for £7[M] (see [|l7]], Chapter 1) and such that P and Q pair 



to Cm under the Weil pairing on £"[M]. This corresponds to the moduli problem denoted in |17] 



by [r(M)] can (see |17j, Sections 3.1 and 9.1), but only because we are working over a field — we 
would have to be more careful with the roots of unity otherwise. There is an obvious right action 
of the group SL2(Z/MZ) on the set of full level-M structures on a given curve E. Suppose G is 
a subgroup of SL2(Z/MZ); by a partial level-M structure of type G on a curve E/K we mean a 
G-orbit of full level-M structures on E. If is a positive divisor of M, then an (A, M) -structure 
on an elliptic curve E/K is a pair (P,Q) of points on E(K) such that Q has "exact order M" 



(see [17], Chapter 1) and such that P and (M/N)Q form a full level-A structure on E; this is an 
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example of a partial level-M structure. If E is an elliptic curve over k, then by a partial level-M 
structure of type G on E we mean a partial level-M structure of type G on Ek that is stable under 
the action of Gal(K/k). 

We let X(M) denote the usual compactified coarse moduli space of elliptic curves with full level- 
M structure; we view X{M) as a curve over fc((jv/)- Note that if char A; divides M then X(M) will 
have several components. For every subgroup G of SL2(Z/MZ) there is also a modular curve, which 
we will denote by X(M; G), that parameterizes elliptic curves with partial level-M structure of type 
G. The curve X(M;G) is a k (^)-scheme, where a £ (Z/AfZ)* is a generator of the subgroup 
detG C (Z/MZ)*. Finally, we denote by Xi(N,M) the modular curve that parameterizes elliptic 
curves with (iV, M)-structure. The curve Xi(N, M) is a scheme over fc((^v). 

Suppose the characteristic of the base field k is not 2, and suppose we are given two integers 
M and N and subgroups G C SL 2 (Z/MZ) and H C SL 2 (Z/iVZ). Let £ be the smallest field 
containing the fields of definition of X(M;G) and X(N;H). We are interested in the functor T 
from the category of fields over I to the category of sets defined as follows: If r D I is a field with 
separable closure R, then F(r) is the set of all i?-isomorphism classes of triples ((E, a), (F,[3),i/j), 
where E is an elliptic curve with partial level-M structure a of type G over r, where F is an 
elliptic curve with partial level- N structure j3 of type H over r, and where ip is a Galois-module 
isomorphism E[2]{R) -► F[2](R); here we say that ((E, a), (F, 0), tp) and ((£', a'), (F' , p'), tp') are 
i?-isomorphic if there are isomorphisms (p: (E,a)n — ► (E',a')n and x : {F,(3)r — * (F'iP')r such 
that -0' ° = X ° ^ on £^[2](J?). We will show that this functor is represented by the ^-scheme 1"° 
defined in the next paragraph. 

The modular curve X(2) is defined over k, and since char k ^ 2 it has only one component. The 
covering X(2) — > X(l) is Galois with group S* = SL2(Z/2Z), and the action of an element s £ 5 
on a point -X"(2) is determined by its action on the triple (E,P,Q) corresponding to that point. 
Let Z\ = X(2)i XjfM) -^(M; G)^ and let Z 2 = X(2)^ Xx(i) H)g, where Xx(i) means the fiber 

product over X(l)g,. The covers Z\ — > X(M; G)^ and Z 2 — > X(N;H)i are Galois with group S. 
Let Z be the 2-dimensional ^-scheme Zi x Z 2 , where x means the fiber product over Spec£, let S 
act on the cover Z — > X(M;G)i x X(N;H)i diagonally, and let Y be the quotient surface of Z 
by this action. Finally, let Y° be the open subvariety of Y that lies over the open subvariety of 
X{l)i x X(l)e where neither factor is oo. 

Proposition 9. The scheme Y° represents T. 

Proof. First let us determine how to describe the r-valued points on Y°. Let y be such a point. 
Then y corresponds to a Gal(i?/r)-stable 5"-orbit of elements of Z{R) that lie over the finite part of 
X(1)r x X(1)r. Let z be one of the points in this orbit. According to the modular interpretation 
of Z, the point z corresponds to the i?-isomorphism class of a quadruple 

{(E,P,Q),(E,a),(F,U,V),(F,P)), 

where E and F are elliptic curves over R, where P and Q are independent 2-torsion points in E(R) 
and U and V are independent 2-torsion points in F(R), where a is a partial level-M structure 
of type G on E, and where (5 is a partial level-iV structure of type H on F. When an element 
of S is applied to this quadruple, the only things that get changed are the points P, Q, U, and 
V, so the fact that the 5-orbit containing z is defined over r means that (E, a) is isomorphic to 
all of its Galois conjugates and (F, (3) is isomorphic to all of its Galois conjugates. According to 
Proposition 3.2 (p. 274) of ||], this means that (E,a) and (F, (3) can be defined over r. If we 
think of E and F as curves over r, then the fact that the 5-orbit of z is defined over r means 
exactly that the group isomorphism ip: E[2](R) — ► F[2](R) defined by sending P to U and Q to 
V is Galois equivariant. Thus, a point y E Y°(r) gives us a triple ((E, a), (F, /3), tp) — but only 
up to i?-isomorphism. And clearly the i?-isomorphism class of such a triple will give us a point on 
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Y°. This gives us a bijection between J-(r) and Hom(Specr, Y°) for every r, and this collection of 
bijections is easily seen to provide a natural equivalence T «-> Hom( • ,Y°). □ 

Let W be the open subscheme of Y° whose r-valued points correspond to ii-isomorphism classes 
of triples ((E,a), (F,(3),ip) such that ip does not come from an isomorphism between Er and Fr. 
From Proposition ^ we see that the r-valued points of W correspond to i?-isomorphism classes of 
triples (C,(E,a), (F, P)), where (E,a) is an elliptic curve with partial level-M structure of type 
G over r, where (F, (3) is an elliptic curve with partial level- iV structure of type H over r, and 
where C is a curve of genus 2 over r provided with a (2, 2)-isogeny E x F — > Jac C that takes twice 
the canonical polarization of E x F to the canonical polarization of Jac C. We abbreviate this by 
saying that W is the moduli space for such triples. 

Corollary 10. Let M' be the least common multiple of 2 and M and let N' be the least common 
multiple of 2 and N. Every geometric component ofW is an open subvariety of a quotient surface 
of X(M') K x X(N') K . 

Proof. Let Z\ and Z2 be as in the construction of Y above and let ip and ip be the natural quotient 
maps from X(M')k to X(2)k and to X(M; G)k, respectively. For every s in the covering group S 
of X(2)/X(l) we get a morphism <1> S : X(M')k ~^ {Z\)k by combining the morphisms sip and ip. 
It is clear from the modular interpretation of these schemes that the maps <& s provide a surjective 
morphism from the sum of six copies of X{M')k to (Z\)k- Similarly we find a surjective morphism 
from the sum of six copies of X(N')k to [Z^jK- Therefore every component of Zk = Z\k x Zik 
is a quotient surface of X(M')k x X{N')k, and every component of Wk is an open subvariety of 
a quotient surface of X(M') K X X(N') K . □ 

We will be interested in finding genus-2 curves over Q whose Jacobians are equipped with (2, 2)- 
isogenies from a product of elliptic curves with specified rational torsion structures. Thus we will 
want to look at the Q-rational points on the moduli space W, and it would be particularly nice to 
find subvarieties of W whose Q-rational points are Zariski dense. In the next few sections we will 
find such subvarieties for several different choices of torsion structures, although we will not phrase 
our arguments in terms of moduli spaces. 

Example. Suppose we are interested in tying together an elliptic curve with (2, M)-structure and 
an elliptic curve with (2, iV)-structure, where M and N are even integers. It is easy to check that 
X(2) x x(1) Xi(2,M) is the sum of six copies of X 1 (2,M), and X(2) x X (i) Xi{2,N) is the sum of 
six copies of X\{2,N). The group S acts on each of these varieties by permuting the summands, 
and the quotient surface Y is the sum of six copies of X\(2,M) x Xi(2,N). Thus in this case W 
has a very simple structure. The reader is encouraged to work out the structure of W for other 
pairs of partial level structures and to keep the results in mind when reading the following sections. 

3.4. Building Jacobians from elliptic curves E with $J5(Q)[2] = 4. If two elliptic curves over 
Q are to have 2-torsion subgroups isomorphic as Galois- modules, it is necessary that they have the 
same number of rational 2-torsion points! In this section we consider the case where this number is 4, 
so we are concerned with the families of elliptic curves over Q with torsion subgroup containing 
Z/2Z x Z/2iVZ, for N < 4. Any member of the family with N = N\ can be paired with any 
member of the family with N = N2, since the 2-torsion subgroups are automatically isomorphic 
as (trivial) Galois- modules. Moreover the generic members of each family (choosing a different 
indeterminate parameter for each) are clearly not isomorphic to each other, so by Proposition |||, 
we get 2-parameter families of genus-2 curves whose Jacobians map via a (2, 2)-isogeny to E\ x E<i- 
In other words, we have shown that the corresponding moduli space is a union of rational surfaces 
over Q. (This also follows immediately from the example at the end of the preceding section.) That 
these families really have two parameters can be seen from the fact that over C, one can specify 
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the j-invariants of the two elliptic curves arbitrarily and independently^. Similar arguments apply 
later in this paper; we leave the details to the reader. 

The product of the rational torsion in the two elliptic curves does not map injectively to the 
rational torsion points of the Jacobian, but only a (2, 2)-subgroup is killed. The group structure 
of the image of this product in the Jacobian depends on N\ and N2, but also on the choice of 
isomorphism between the 2-torsion of the two curves if N% and N2 are even, since in this case 
each elliptic curve has a 2-torsion point which is distinguished by the property of being iVj times 
another rational torsion point. For instance, if N\ = N2 = 4, elementary calculations with abelian 
groups show that this group has structure Z/2Z x Z/4Z x Z/8Z if these special 2-torsion points 
are identified under if), and Z/8Z x Z/8Z otherwise. If N\ = 3 and N2 = 4, then we obtain 
Z/2Z x Z/24Z. If Nx = N 2 = 3, then we obtain Z/6Z x Z/6Z. We have not considered the cases 
where iVj < 2, since these cases lead to subgroups of the above. 

Although some rational 2-power torsion is lost upon passing from E x F to the Jacobian, there is 
also the possibility that some 2-power torsion can be gained: a non-rational point on E x F might 



map to a rational point on J. This phenomenon will be explored in Section |3,7 . 

3.5. Building Jacobians from elliptic curves E with #E(Q)[2] = 2. We now consider elliptic 
curves E and F having torsion subgroups Z/iVZ and Z/iV'Z with even N,N' < 12. An isomorphism 
of Galois-modules from E[2](Q) to F[2](Q) must map the rational 2-torsion point to the rational 
2-torsion point, so we see that such an isomorphism exists if and only if the quadratic field over 
which the non-rational 2-torsion points of E are defined equals the quadratic field for F, and this 
holds if and only if the discriminants of E and F are equal modulo squares. We are thus led to the 
problem of finding the rational solutions to 

(1) A N (t)y 2 = A N ,(u) 

outside the 1-dimensional closed subset corresponding to cases where E or F degenerates or where 
j(E) = j(F). Each such solution gives rise to a Jacobian of a genus-2 curve over Q whose torsion 
subgroup contains the quotient of Z/iVZ x Z/A'Z by the identification of the points of order 2 in 
each factor. 

If N 1 = 4, then © is 

A N (t)y 2 = 16u + 1, 

which is a rational surface over Q, since we can solve for u in terms of t and y. In particular, 
for N = 10, we obtain a 2-parameter family of Jacobians whose torsion subgroups contain Z/20Z. 
(The other N will give results which are subsumed in our other results.) 
If A' = 6, then (0) is 

(2) A N (t)y 2 = (u + l)(9u + l). 

This can be considered as a conic over Q(i) with a Q(i)-rational point, namely (u,y) = (—1,0), 
and it is easy to see that this makes (^) a rational surface. In particular, for N = 10 or N = 12, we 
obtain a 2-parameter family of Jacobians whose torsion subgroups contain Z/30Z or Z/3Z x Z/12Z, 
respectively. 

If N' = 10 and N = 8, then (g) is 

(8t 2 -8t + l)y 2 = (2u - l)(4u 2 - 2u - 1). 

If we set t = (s 2 — 2s + 3) / (4s 2 + 4) , we obtain a split elliptic surface over the s-line, and the Ope- 
rational point (u,y) = (—1/2, (2s 2 + 2)/(s 2 — 2s — 1)) is of infinite order, since its specialization at 
s = is of infinite order on the resulting elliptic curve over Q. Thus we have an elliptic surface 
over P 1 of positive rank, and the Q-rational points on this surface outside of the 1-dimensional set 
of degenerate solutions parameterize Jacobians over Q whose torsion subgroups contain Z/40Z. 

2 Actually, one should choose the j-invariants to be different, so that the elliptic curves are guaranteed not to be 
isomorphic, but this is an open condition, so the number of parameters is not reduced by this constraint. 
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J£N' = N= 10, then @ is 

(24 - l)(4t 2 -2t- l)y 2 = (2u - l)(4u 2 - 2u - 1) 

which is an elliptic surface over the i-line, and (u,y) = (t,l) is a Q(t)-rational point of infinite 
order, since under the obvious isomorphism over Q(t)(y / (2t — l)(4i 2 — 2t — 1)) to the elliptic curve 

y 2 = (2u - l)(4u 2 - 2u- 1) 

it maps to a point with non-constant u-coordinate. Hence we obtain a positive rank elliptic surface 
whose points (outside a 1-dimensional set) parameterize Jacobians whose torsion subgroups contain 
Z/5Z x Z/10Z. 

Similarly, if N 1 = N = 12, then (|) is 

(2t 2 -2t + l)(6t 2 - 6t + l)y 2 = (2n 2 - 2-u + l)(6u 2 - 6u + 1), 

which again is an elliptic surface over the t-line if we choose (u, y) = (i, 1) as the zero section. We 
then have the Q(i)-rational point (n, y) = (t, — 1), which is of infinite order, for the same reason 
as in the previous case. Hence we obtain a family of Jacobians, parameterized by the points on an 
open subset of a positive rank elliptic surface, whose torsion subgroups contain Z/6Z x Z/12Z. 
Finally, if N' = 10 and N = 12, then @ is 

(3) (2t 2 -2t + l)(6i 2 -6t + l)y 2 = (2u - l)(4u 2 - 2u - 1). 

If we choose t = 1/3, the resulting elliptic curve is curve 900A1 of ||, which has rank 1. There are 
only finitely many rational points on this elliptic curve that give u such that E± Q degenerates or is 

1/3 

isomorphic to > so we obtain a family of Jacobians, parameterized by the points on an open 
subset of a positive rank elliptic curve, whose torsion subgroups contain Z/60Z. 

Remark. In fact, there are infinitely many other specializations of t for which (||) becomes an 
elliptic curve of positive rank. 

3.6. Building Jacobians from elliptic curves E with #E(Q)[2] = 1. Here we consider elliptic 
curves E and F having torsion subgroups Z/iVZ and Z/iV'Z, respectively, with N,N' odd (and at 
most 9). For an elliptic curve y 2 = f(x) with trivial rational 2-torsion, each non-trivial 2-torsion 
point is defined over a cubic extension, namely the extension obtained by adjoining a root of f(x). 
The Galois-modules i^[2](Q) and i ? [2](Q) are isomorphic if and only if the corresponding cubic 
fields are isomorphic. In this case, the discriminants of the elliptic curves must be equal modulo 
squares. The converse is not quite true (cubic fields having the same discriminant modulo squares 
are not necessarily isomorphic), but it will turn out that the discriminants often contain enough 
information for our purposes. 

A short search for solutions to Aj(t) = Ag(u) modulo squares (and such that the discriminants do 
not vanish) leads to the solution (t, u) = (—16/3, 4). PARI shows that the corresponding cubic fields 
are both isomorphic to the unique cubic field of discriminant —2964. (Uniqueness can be seen from 
the tables obtainable by ftp at megrez.math.u-bordeaux.fr in directory /pub/numberf ields.) 
Hence we find a genus-2 curve whose Jacobian has a rational torsion point of order 63. Following the 
recipe given by Proposition ^| gives an explicit model for this genus-2 curve. After a few simplifying 
changes of variable, we obtain the model 

(4) C : y 2 = 897a; 6 - 197570x 4 + 79136353x 2 - 146398496. 
Let D be the divisor (R) + (R') — (oo + ) — (oo~) on C, where 

R = ^Y 5 ^ 4515015 - 68241 , 

where R' is the Galois conjugate of R, and where oo + and oo~ are the two points at infinity on a 
desingularized model of C. One can check that D maps to a 9-torsion point on one of the elliptic 
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quotients of C and to a 7-torsion point on the other elliptic quotient (see fl4||), so D represents 
a divisor of order at least 63 on C. Since C has good reduction at 5, and since there is only one 
positive multiple of 63 less than the Hasse-Weil bound (1 + \/5) 4 for #(Jac C)(Fs), we must have 
#(JacC)(Fs) = 63, and hence the torsion subgroup of (JacC)(Q) is isomorphic to Z/63Z and is 
generated by the class of D. It seems likely that there will be only finitely many genus-2 curves 
over Q whose Jacobians possess a rational 63-torsion point. It is perhaps even the case that the 
curve (Q) is the only one. 

Similarly, we find the solution (t,u) = (7, —14/13) to A-?(t) = Ay(u) modulo squares. (We must 
be careful to exclude solutions where u = t, u = 1/(1 — t), or u = (t — l)/t, since these correspond 
to taking the same elliptic curve but with one 7-torsion point a multiple of the other.) For these 
values of t and u, the corresponding cubic fields turn out to be isomorphic, so we indeed obtain a 
curve C whose Jacobian contains a subgroup of rational points isomorphic to Z/7Z x Z/7Z. Using 
Proposition f|, we find the model 

C : y 2 = x 6 + 3025x 4 + 3232987x 2 + 869675859 

for this curve. The Jacobian of the reduction of C modulo 5 is isogenous to the product of two 
elliptic curves each with exactly 7 points (7 being the only multiple of 7 less than the Weil bound), 
so the Jacobian of the reduction has exactly 49 points. Thus we find that the rational torsion on 
the Jacobian of C is in fact isomorphic to Z/7Z x Z/7Z. 

To handle some of the other cases (in particular those with N = 3) we will use the following 
lemma. The restrictions on E are not necessary, but we only need the result under these restrictions. 

Lemma 11. Let k be a field whose characteristic is neither 2 nor 3. If E is an elliptic curve over k 
such that E[2](k) is trivial and j(E) ^ 0, 1728, then there is a 1 -parameter family of elliptic curves 
E' over k such that E' has a k-rational 3-torsion point and E'[2] = E[2] as Qdl{k/k) -modules. 

Proof. Write E in Weierstrass form as y 2 = x 3 + Ax + B (so A,B ^ 0), and let r be a root of 
x 3 -\-Ax + B. We claim that specializing t to — B 2 j A 3 in the universal elliptic curve y 2 = x 3 + {x-\-i) 2 
over ^i(3) gives one E' with the desired properties. A calculation shows that s = —(B/Ar) 2 is a 
root of x 3 + (x — B 2 /A 3 ) 2 in k(r), and s cannot be in k, since r is at most quadratic over k(s). 
Thus k{r) and k{s) are the same cubic extension of k, and hence the curves 

y 2 = x 3 + Ax + B and y 2 = x 3 + (x - B 2 /A 3 ) 2 

have isomorphic 2-torsion as Galois-modules. 

The set of all E' with the desired properties corresponds to the /c-rational points of a twist of the 
modular curve X\{2,6) classifying elliptic curves with a 3-torsion point and full level-2 structure. 
But this modular curve is rational, and the previous paragraph shows that our twist of it has a 
/c-rational point, so our twist is a rational curve over k, and we obtain the desired 1-parameter 
family. □ 

Applying the lemma with k = Q(t) and E as the universal elliptic curve with a 7-torsion point 
yields a 2-parameter family of pairs of elliptic curves with a 3-torsion point and a 7-torsion point 
respectively, and having isomorphic 2-torsion as Galois-modules, so by Proposition ||, we obtain a 
2-parameter family of genus-2 curves over Q whose Jacobians possess a rational 21-torsion point. 
Similarly, if we take E = E\ we obtain a 2-parameter family of genus-2 curves over Q whose 
Jacobians have torsion subgroup containing Z/3Z x Z/9Z. 

Next we construct infinitely many genus-2 curves with a rational 35-torsion point. Let E be 
the elliptic curve E^ 1 with a rational 7-torsion point. The elliptic curves E' over Q equipped 
with a rational 5-torsion point and a Galois- module isomorphism E'[2] — > E[2] correspond to the 
rational points on a twist X' of Xi(2,10). Now Xi(2,10) is a covering of X\(5) with Galois 
group GL2(Z/2Z) = S3, and the subgroup ^3 corresponds by Galois theory to an intermediate 
covering whose function field is the quadratic extension of Q(t) (where t is the parameter on Xi(5)) 
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obtained by adjoining the square root of the discriminant of the cubic ft(%) if E\ is written in the 
form y 2 = ft(x). This function field is of genus 1, since from Table ||], A^(t) = t{t 2 — lit — 1). But 



X\{2, 10) is an elliptic curve as well (see [18]), so its map down to the intermediate covering must 
be an isogeny (in fact, a 3-isogeny). Similarly our twist X' of X\(2, 10) is a genus-1 curve with a 
degree-3 map to the unique intermediate covering X" of degree 2 over X\(5). The curve X" classifies 
elliptic curves E' with a 5-torsion point and a Galois-stable ^3-orbit of isomorphisms E'[2] — > E[2\. 
There are two ^-orbits, and they are defined over Q(y / Ay(— l)As(i)), since an automorphism of 
this field over Q(i) is trivial on Q(y / A7(— 1)) if and only if it is trivial on Q(As(t)), which means 
the signatures of its permutation actions on the nonzero 2-torsion points of E and E§ must be the 
same. Thus X" is the genus-1 curve y 2 = A~r(— l)As(t), i.e., 

y 2 = -26t(t 2 - lit - 1). 



This is an elliptic curve of conductor 54080, which is too large for it to be listed in the tables 
of H|, but Cremona's rank-computing program shows that it has rank 2; the points (—2/13, 22/13) 
and (—26, 806) are independent of one another and have infinite order. The genus-1 twist X' of 
X\(2, 10) has a rational point, because a PARI search finds an elliptic curve E l 5 , with t = 1/26, 
such that the cubic field (of discriminant —104) obtained by adjoining a 2-torsion point is the same 
as that obtained by adjoining a 2-torsion point of E. Thus X' is an elliptic curve 3-isogenous to 
X" . In particular, X' has rank 2, so it has infinitely many rational points, all but finitely many of 
which give rise to genus-2 curves whose Jacobians possess a subgroup Z/5Z x Z/7Z = Z/35Z. 

Similarly the elliptic curve E = Eg 5 with a rational 9-torsion point has 2-torsion subgroup 
isomorphic as Galois-module to that of the elliptic curve E® 3 ^ 10 , and the elliptic curve 

y 2 = A 9 (-5)t(t 2 - lit - 1) 

of conductor 13838400 (!) has rank 2 again according to Cremona's program, with (—10/93, 6970/93) 
and (—640/27, 5860240/81) as independent points of infinite order. Thus we obtain infinitely many 
genus-2 curves whose Jacobians possess a rational 45-torsion point. 

3.7. Gaining 2-power torsion. Let fe be a field of characteristic not 2, let K be a separable 
closure of k, and let Gt = GaX(K/k). If E is an elliptic curve over k, then E[2] \ {0} = SpecL 
where L is a separable fc-algebra of dimension 3. Explicitly, if E is in the form y 2 = f(x) with 
f(x) 6 k[x] a cubic polynomial, then we may take L = k[T]/(f(T)). As is well known (see |2|, ||, 

H\G k ,E[2\) = ker (l*/L* 2 ^E? k*/k* 2 ' 



and the composition 

E{k)/2E(k) ^ H x (G k ,E[2]) ker (l*/L* 2 ^ k */ k * 



is a map i sending a rational non-2-torsion point P with x-coordinate xp to the image of xp — T. 
When P is a non-trivial rational 2-torsion point, xp — T vanishes in exactly one component of 
L, and l(P) equals the image of xp — T is all but this component; the image of P in this last 
component (which is a copy of k) can be deduced up to squares from knowing that l(P) is in the 
kernel of the norm. 

Proposition 12. Let f{x) and g(x) be cubic polynomials in k[x] such that 

E :y 2 = f(x) and F : y 2 = g(x) 

are elliptic curves admitting an isomorphism of G ^-modules tp : E[2](K) — > F[2](K). Define L 
and t as above for E, and similarly define L' and l' for F. The map tp induces an isomorphism 
ip : L' — * L. Let A be the quotient of E x F by the graph of if). 
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(a) If a point (Pq,Qo) of (E x F)(K) maps to a k-rational point on A, then 2Pq G E(k) and 
2Q GF(k). 

(b) Given P G E(k) and Q G F(k), there exists a point (Po,Qo) of (E x F)(K) that maps to 
a k-rational point on A and such that 2Pq = P and 2Qq = Q, if and only if l'(Q) corresponds to 
l(P) (up to squares) under the isomorphism ijj. 

Proof. Let A be the principal polarization of A derived from the principal polarization on E x F. 
If we compose the isogeny E x F —* A with A and the dual isogeny A — > E x F, the result is 
multiplication-by-2 on E x F, so part (a) is clear. 

Now let P G E(k) and Q G F(k). Suppose that there exists (Pq, Qq) & (Ex F)(K) that maps to 
a fc-rational point on A and such that 2Pq = P and 2Qq = Q. This means that (Pq, Qo) a — (Po, Qq) 
is in the graph of for all a G Gj~. In particular, under the map induced by tp, the class of 
£ CT := Pq — Pq in H 1 (Gk, E[2]) is mapped to the class of £ a := Qq — Qq. In other words, ip takes 
l'(Q) to i(P). 

Conversely suppose that tp takes i'(Q) to l(P). This means that the map induced by ip takes 
the image of P in H 1 (Gk, E[2]) (under the coboundary map) to the image of Q in H 1 (Gk, F[2]). 
Fix Pi G E(K) such that 2P X = P and Qi G F(K) such that 2Qi = Q. Then there exist 2-torsion 
points R G E[2)(K) and S G F[2](K) such that 

?/>(Pf - A + R a - R) = Qi - Qi + S a - S 

for all a G G k . Let P = Pi + R and Q = Qi + R- Then 2P = P, 2Q = Q, and 

CPo,Qor-(i>Q,<2Q) 

is in the graph of ip for all a, so (Po ; Qo) niaps to a rational point on A. □ 

For elliptic curves E over Q with all 2-torsion points rational, L is simply Q x Q x Q, the factors 
corresponding to the non-trivial torsion points T±, T2, T3. Now assume that E = E^ s . Then 
i(T2) G L is (xt 2 — ^Ti j *i xt 2 — X T 3 ), where * is determined by the condition that the product of all 
three components equal 1 (modulo squares). By the formulas in Table ||, we have (modulo squares) 

L (T 2 ) = (-1, -(St 2 - l)(St 2 + 8t + 1), (8t 2 - l)(8t 2 + 8t + I)) G (Q*/Q* 2 ) 3 . 
Now if jF = E2 8 with non-trivial 2-torsion points T{, T3 and corresponding map l', then 

i'(T%) = (-1, -(8u 2 - l)(8u 2 +8u + 1), (8n 2 - l)(8u 2 + 8u + 1)) G (Q*/Q* 2 ) 3 . 

If tj) is the isomorphism E[2] — > F[2] taking Tj to TL then the map ij) of Proposition ^ is simply 
the identity QxQxQ-tQxQxQ. Thus by Proposition [TJ, if there exists y such that 

(5) (8t 2 - l)(8t 2 +8t + l)y 2 = (8u 2 - l)(8u 2 + 8u + 1), 

then there exists (Po,Qo) on E x F with double ^2^2) such that (Pq^Qq) maps to a rational 
point on the quotient A of E x i 7 by the graph of ^/?. In this case, (Pq, Qq) maps to a new rational 
2-torsion point on A, not in the image of E(Q) x -F(Q). 

We can consider (||) as a genus-1 curve over Q(t), and we make it an elliptic curve by choosing 
(u,y) = (t,l) as the origin. Then the point (u, y) = (t,— 1) has infinite order, since the divisor 
(t, —1) — (t, 1) corresponds to a non-constant point on the Jacobian of 

y 2 = (8u 2 - l)(8u 2 +8u + 1), 

which is isomorphic to (||) over Q(t)(y/(8t 2 — l)(8i 2 + 8t + 1)). Hence (JsJ) is a positive rank elliptic 
surface whose points (outside a 1-dimensional set) parameterize a family of genus-2 curves whose 
Jacobians have torsion subgroup over Q containing Z/2Z x Z/2Z x Z/4Z x Z/8Z. 

Let us now try to do the same for E = E\§ and F = E^q. In this case, from Table [5] we compute 

i(T%) = (2(t - 3)(t + 3)(t - 5), (t + 3)(t - 5), 2(t - 3)) G (Q*/Q* 2 ) 3 . 
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This time in order to get an extra 2-torsion point on A coming from a half of (Ti,T[), we need to 
find rational solutions to the system 

(6) 2(t - 3) = 2(u - 3)y 2 

(t + 3)0 - 5) = (u + 3)(u - 5)z 2 . 

(Note that the third condition 

2(t - 3)(t + 3)(t - 5) = 2(u - 3)(u + 3)(« - 5) (modulo squares) 

would then be automatic.) If we solve for t in the first equation and substitute into the second, we 
obtain the equation 

((« - 3)y 2 + 6) ((u - 3)y 2 - 2) = (u + 3)(u - 5)z 2 , 

which defines a genus-1 curve over Q(u). We make it an elliptic curve by choosing (y,z) = (1, 1) 
as origin, and then note that (y, z) = (—1, 1) is a point of infinite order, since it is of infinite order 
for the specialization u = 0. Thus the system @ provides us with a positive rank elliptic surface 
whose points parameterize a family of genus-2 curves whose Jacobians have torsion subgroup over 
Q containing Z/2Z x Z/6Z x Z/6Z. 

Next we investigate the possibility of gaining 2-power torsion when E = E^q and F = E^g- Let 
Ti,T2,T^ and T{,T^,T^ be the nontrivial 2-torsion points on E and F, respectively, as in Table |. 
We have 

(■(Ti) = (2(t - 3)(t + 3)(t - 5), (t + 3)(t - 5), 2(t - 3)) E (Q7Q* 2 ) 3 , 

t '(T^) = (-1, -(8u 2 - l)(8u 2 + 8u + 1), (8n 2 - l)(8u 2 + 8u + 1)) G (Q*/Q* 2 ) 3 . 

In an attempt to obtain simpler equations than we would by mapping Tj to T- for each i, we let 
ip : E[2] — >• F[2] be the isomorphism such that if)(Ti) = T^, ^(^2) = and ^(^3) = ^i- Hence ^ 
is the isomorphism QxQxQ^QxQxQ acting on the factors as the permutation (1 3 2). By 
Proposition [l^, a point on Ex F with double (Ti, T^) maps to a new rational point on the quotient 
A if and only if we can find rational numbers y and z such that 

2(i-3) = (-l)y 2 , 

(t + 3)(t - 5) = (8n 2 - I)(8u 2 + 8n + l)z 2 . 

If we solve the first equation for t, substitute into the second, and multiply both sides by 4, we 
obtain 

(y 2 - 12)(y 2 + 4) = 4(8u 2 - l)(8u 2 + 8u + l)z 2 . 

For y = 2/9, the resulting genus-1 curve has a rational point (u, z) = (1/3,44/9), and is birational 
to the elliptic curve 

Y 2 = X 3 - 1681X 

of conductor 53792 and rank 2. The new rational point on A is a 2-torsion point, since its double 
is the image of (Ti,I^), which is in the graph of ip. Hence we have produced a family of genus-2 
curves, parameterized by the points on a positive rank elliptic curve, whose Jacobians have torsion 
subgroup over Q containing Z/2Z x Z/2Z x Z/24Z. 



4. Genus three 

4.1. Jacobians (2, 2, 2)-isogenous to a product of elliptic curves. In this section we will show 
how one can find a curve of genus 3 whose Jacobian is isogenous over a quadratic extension of the 
base field to a product of three given elliptic curves. Genus-3 curves of the sort we will see were 
used in [01. 



We maintain the conventions of Section 3.1 
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Suppose Ei, E2, and E3 are elliptic curves over a separably closed field K, and let N be a positive 
integer not divisible by the characteristic of K. The product of the canonical polarizations on the 
Ei is a principal polarization A on the abelian variety A = Ei x E2 x E3, and the Weil pairings 
on the iV-torsion subgroups of the Ei combine to give us a non-degenerate alternating pairing e^v 
from A[N] to the group scheme of iVth roots of unity over K. Suppose G is a sub-group-scheme of 
A[N] that is maximal isotropic with respect to the pairing ejy. As in the similar situation we saw in 
Section 13. 2L the polarization iVA on A reduces to a principal polarization fi on the quotient variety 



B = A/G. A result of Oort and Ueno 34] shows that the polarized variety (B,n) either breaks 
up as a product of lower-dimensional polarized varieties or is the canonically polarized Jacobian 
of a curve C over K of genus 3.^] We would like to see which group-schemes G lead to curves in 
the case where N = 2. Since we will be working over a separably closed field, we will identify 
sub-group-schemes of A [2] with subgroups of A[2](if). 

Lemma 13. Let A = Ei x E2 X E3 and 62 be as above. There are exactly 135 maximal isotropic 
subgroups G of A[2](K). Exactly 81 of these group-schemes are of the form Gi x G2, where Gi 
is a maximal isotropic subgroup of Ei[2](K) for some i and G2 is a maximal isotropic subgroup of 
Y\j^iEj[2](K); for these G, the polarized variety {B,fj) splits into a product of lower- dimensional 
polarized varieties. If G is one of the remaining 54 groups, then for each i we may label the nonzero 
elements of Ei[2](K) by the symbols Pi, Qi, and Ri in such a way so that G is the group 

{(0, 0, 0),(0, Q 2 , Q 3 ), (Q u 0, Q 3 ), (Q X ,Q 2 , 0), 

(-Pi) P2, P3), (Pi,R2,Rs), (R x , P 2 , R3), (R x , R2, -Pj)}- 

Remark. In fact, our constructions below will show that every group of the last type gives rise to 
a curve. This fact can also be proven by assuming that a G of the given type is the kernel of a map 
A — > Ai x A 2 of polarized varieties and obtaining a contradiction. In anticipation of this result, we 
will call maximal isotropic subgroups of A[2](if) (or sub-group-schemes of A[2]) non-split if they 
are of the latter type. 

Proof. In any group isomorphic to (Z/2Z) 6 with a non-degenerate alternating pairing, there are 
(2 6 — 1)(2 5 — 2)(2 4 — 2 2 ) ways of choosing an ordered triple (^1,^21^3) that generate a maximal 
isotropic subgroup, and each maximal isotropic subgroup has (2 3 - 1)(2 3 - 2)(2 3 - 2 2 ) such bases, 
so there are 

( 2 6_ 1)(2 5_ 2)(2 4_ 2 2 ) 

(2 3 -l)(2 3 - 2)(2 3 - 2 2 ) 

such subgroups. 

For i = 1,2,3 let Si denote the set of maximal isotropic subgroups of A[2](if) that can be 
written G x x G 2 , with Gi C Ei[2](K) and G 2 C Uj^i E j[ 2 K K )- There are 3 choices for G x and 
(2 4 - 1)(2 3 - 2)/(2 2 - 1)(2 2 - 2) = 15 choices for G 2 , so #5; = 45. The intersection of any two of 
the S% is the set S of subgroups of .A [2] (if) that can be written Gi x G2 x G3, with Gi C Ei[2](K); 
clearly ffS = 27. Thus there are if Si + ffS2 + #5*3 — 2ffS = 81 subgroups that split as in the 
statement of the lemma. 

We are left with 135 — 81 = 54 subgroups to account for, and it is easy to see that there are 
exactly this many subgroups of the form described in the final sentence of the lemma: There are 3 
choices for each of the Qi, and given Pi and P2, there are 2 choices for P3. □ 

Suppose now that A; is a field of characteristic not 2 with separable closure K, and let E x , E 2 , 
and £"3 be elliptic curves over k. It is clear that a non-split sub-group-scheme of Eik x E2K x E%k 
will come from a sub-group-scheme of E x x E2 x £"3 if and only if we have both that all of the 



3 The analogous statement is not necessarily true over a field that is not separably closed. See the remark following 



the proof of Proposition |l^. 
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points Qi are denned over k and that every /c-automorphism of K that moves any of the Pi moves 
exactly two of them. Given the first condition, the second condition will hold if and only if the 
product of the discriminants of the curves Ei is a square in k. 

So suppose Ei is the elliptic curve over k given by the equation y 2 = x(x 2 + AiX + Bi) where 
Bi 7^ 0, and let Qi be the rational 2-torsion point (0, 0). The discriminant of Ei differs by a square 
factor from the number Aj = A 2 — 4£?j, so let us assume that A1A2A3 is a square in k. For each i 
let Pi be a nonzero element of Ei[2](K) different from Qi. Let G be the non-split sub-group-scheme 
of the product A = E\ x E2 x E 3 corresponding to this choice of P's and Q's. We are led to the 
question: Is the quotient polarized variety A/G the Jacobian of a curve over k, and if so, what 
equations define the curve? 

Before we answer this question, we must define some numbers. For each i, we let di = —{Ai + 
2xp i ), where xp i denotes the ^-coordinate of the point Pi. Note that d 2 = Ai. The product 
R = d±d 2 d 3 is an element of k because A1A2A3 was assumed to be a square. We let Aj denote 
Ai/di, and we define the twisting factor (associated to the given Ei, Pi, and Qi) to be the number 

= d 1 d 2 d 3 (X 2 + \\ + A| - 2A!A 2 A 3 - 1) . 

(The twisting factor is so named because it determines a quadratic extension of k over which A/G 
becomes isomorphic to a Jacobian; see Proposition |l~5| .) 

Proposition 14. With notation as above, suppose T = 0. Then each of the products B1B2, B\B 3 , 
and B 2 B 3 is a square, and A/G is isomorphic (over k) to the polarized Jacobian of the hyperelliptic 
curve C over k defined by the homogeneous equations 

W 2 Z 2 = aX 4 + bY A + cZ A 
= dX 2 + eY 2 + fZ 2 , 

where a, b, and c are given by 

fRBA ( B x B 2 B 3 \ 
a= {—) {-A- 1 + A- 2 + A- 3 ) 
(RB 2 \ f Bi_B 1 B 1 
V 2 J V A x A 2 + A 3 
RB 3 \ f Bi B2 _ B3 \ 
2 J V A x + A 2 A 3 J ' 
where d, e, and f are determined up to sign by the relations 

B 2 B 3 d 2 = 1 
B^e 2 = 1 
BiB 2 f 2 = 1, 

and where the signs of d, e, and f are chosen so that we have A\ = —aef and A 2 = —bdf and 
A 3 = —cde. 

Proof. The statement that T = is equivalent to the statement that \ 2 + X 2 + A3 — 2Ai X 2 A3 — 1 = 0. 
Solving this equation for A3 in terms of Ai and \ 2 leads to 

A 3 = AiA 2 ± ^(A?-1)(A|-1), 
and dividing this last equality by d 3 gives 

^3 _ A X A 2 ± 4.^B^B~ 2 
A 3 ~ R 
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Thus B\B 2 is a square in k. By symmetry, the numbers B1B3 and B 2 B^ are squares as well. 

We leave it to the reader to verify that the signs of d, e, and / can be chosen so that the relations 
A\ = — aef and A 2 = —bdf and A3 = — cde hold; this can be seen by noting that the squares of 
the desired relations, as well as the product of the desired relations, follow from the formulas given 
and the condition that T = 0. 

Note that the coefficients d, e, and / are all nonzero, so the single equation dX 2 + eY 2 + fZ 2 = 
defines a nonsingular curve C of genus 0. The fact that none of the Bi is zero implies that none of 
the numbers a/d 2 + b/e 2 , a/d 2 + c/ f 2 , and b/e 2 + c/ f 2 is zero. Furthermore, the nonvanishing of 
the Bi together with the fact that T is zero can be used to show that 

(£)(?) + (£)(£) + (?) (£) 

is not zero. We leave it to the reader to show that the nonvanishing of the several expressions 
just mentioned guarantees that the element a(X/Z) 4 + b(Y/Z) 4 + c of the function field of C has 
exactly 8 zeroes, each simple, and exactly 2 poles, each of order 4. Since the total quotient ring of 
C is obtained from the function field of C by adjoining a square root of this function, we see that 
C is a hyper elliptic curve of genus 3. 

It will suffice to prove that JacC = A/G in the special case where k has characteristic 0, for 
if k has positive characteristic we can simply lift all of the coefficients Ai and Bi up to the ring 
W of Witt vectors over k; to see that this can be done in such a way that T lifts to 0, we argue 
as follows. First we lift each Aj up to W in such a way that the product of the lifted values is a 
square in W, and we lift R to a square root of this product. Now we view T as a function of the 
three variables Ai. We will be able to use Hensel's lemma to lift the Ai up to W so as to make 
T = if any one of the partial derivatives dT/dAi is nonzero. We claim that at least one of these 
derivatives is nonzero. To prove this, let us assume that all three of the partial derivatives are zero 
and obtain a contradiction. From our assumption we find that RAi = AjJT^A,- for each i. If 
any one of the Ai were zero, these three equalities would imply that all of the Ai were zero, which 
would contradict the assumption that T = 0. But if all of the Ai were nonzero, then by multiplying 
the three equalities together we would find that R = AiA 2 A^, and this formula for R, combined 
with RAi = Ai YijjLi Aj, would show that A 2 = Aj, which would lead to the impossibility Bi = 0. 
This proves our claim. 

To prove that JacC = A/G in characteristic zero we need only consider the universal case, in 
which we let the di and the \ be indeterminates, we let i be the quotient field of the domain 

Q[di, d 2 , d 3 , Ai, A 2 , \ 3 }/(\ 2 + X 2 + \ 2 - 2AiA 2 A 3 - 1), 

we take 

Ai = Xidi 

Bi = (A 2 - d 2 )/4 

Qi = (0, 0) 

Pi = (-(di + Ai) /2,0) 
R = did 2 d 3 , 

and we let k be the subfield Q(Ai,A 2 , A3 , Bi , B 2 , B3 , R) of I. (Note that k is fixed by the involution 
of i that acts on Ai, A2, di, and d 2 by multiplication by —1, so A; is a proper subfield of I and contains 
(by symmetry) none of the di.) So let us assume that we are in the universal case. 

Let lx be the involution on C that fixes W, Y, and Z and that sends X to —X. The involution 

ix gives us a double cover (fx ■ C — > Fx of curves over k, and we would like to find equations for 
the curve Fx- If we dehomogenize the equations for C with respect to Z by letting w = W/Z, 

x = X/Z, and y = Y/Z, and if we then divide by ix by defining u = x 2 , we find that the quotient 
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curve Fx is given by 



w 2 = au 2 + by 4 + c 



= du + ey 2 + /. 
This pair of equations can be combined to get the single equation 
(7) v 2 = (ae 2 + bd 2 )y 4 + 2aefy 2 + (af 2 + cd 2 ) 



where v = dw. Using Example 3.7 (pp. 293-294) in Section X of |36|], we see that the Jacobian of 
the genus- 1 curve Fx is the elliptic curve Ex over k defined by 

(8) y 2 = x(x 2 + A x x + B x ) 

where A x = —aef and 4B X = (ae/) 2 - (ae 2 + bd 2 )(af 2 + cd 2 ). Clearly we have A x = A\, and by 
using a little algebra and the fact that T = we can see that Bx = B\. Thus the double cover (px 
gives us a map (p x from E\ to the Jacobian J of C. 

Similarly, the involution iy on C that sends Y to —Y and that fixes the other variables gives us 
a degree-2 cover ipy from C to the curve Fy over k given by the equation 

v 2 = {ae 2 + bd 2 )x 4 + 2bdfx 2 + {bf 2 + ce 2 ). 

The Jacobian of Fy is isomorphic to E2, so we get a map (p Y from E2 to J. 

Lastly, the involution tz = t>x us a degree-2 cover ipz '■ C — ► Fz to a curve Fz over k whose 
Jacobian is isomorphic to E3, so we get a map ip* z from £3 to J. (When dividing C by Lz, the reader 
may find it helpful to recast the first defining equation of C into the form V 2 Y 2 = aX 4 + + C 'Z 4 
by letting V = WZ/Y; this will make it possible to dehomogenize with respect to Y and get 
equations similar to the ones obtained when dividing by tx-) 

Let / denote the subgroup of the automorphism group of J generated by l* x , l y , and l* z , and 
let C denote the category of abelian varieties over the separable closure K of k up to isogeny. The 
semisimple group ring Q[J] acts on the class [J] of J in C, and [J] splits into the direct sum of its 
eigenspaces. The class of the image of (p x consists of the sum of the eigenspaces on which i* x acts 
as 1, while the class of the image of ip Y consists of the sum of the eigenspaces on which l y acts 
as 1. However, the eigenspaces on which both l* x and i Y act as 1 are trivial, because their sum is 
the class of the Jacobian of the quotient of C by the group (lx, i<y}, and this quotient has genus 
0. Thus the classes of the images of (p* x and (p Y have trivial intersection. Similarly, we find that 
the class of the image of ip* z shares no nonzero eigenspaces with the classes of <p x or ip Y . It follows 
that the morphism $* = <p x x ip Y x (p* z from A to J is an isogeny. 

Let n denote the canonical polarization of J. The fact that ipx has degree 2 implies that (p x fi(p x 
is the multiplication- by- 2 map on E\, and similarly ip Y ^up Y and <f z fi(p* z are the multiplication- by- 2 
maps on E2 and E%; here ~ indicates the dual morphism. We find that we have a commutative 
diagram 

A ^ A 



J J. 

We see that $* has degree eight and its kernel G' is a maximal isotropic sub-group-scheme of A [2]. 
The group-scheme G' must be non-split. To complete the proof of the proposition we must show 
that it is equal to the given group-scheme G. 

Since G' is non-split, there must be nonzero elements Q\ G Ei[2](K) such that G'(K) contains 
the three elements (O^Q^Q^), (Q'i,0,Q' 3 ), and (Qi,Q' 2 ,0). As we noted before the statement of 
the proposition, the points Qi must actually be defined over k. However, because a\ is not in k, 
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the curve Ei has only one nonzero /c-defined 2-torsion point, namely Qi. Therefore Q\ = Q{. There 
are exactly two non-split maximal isotropic subgroups of A[2](if) that contain the subgroup 

H = {(0, 0, 0), (0, Q 2 , Q 3 ), (Q u 0, Q 3 ), (Qi,Q 2 , 0)}, 

and the intersection of these two groups is H. So to show that G'(K) = G(K), all we must do 
is show that the two groups contain a common element that is not in H. To show this, we can 
specialize our universal example to a particular case, and show that the specialized groups G and 
G' contain a common element not in H. 

Consider the specialization map t — * C that takes each di to —4 and each Aj to —1/2; we will 
abuse notation by saying that d\ = —4, and so on. We see that each Ai = 2, each Bi = —3, each 
Aj = 16, each P, = (1,0), and the curve C is defined by the two equations W 2 Z 2 = — 18(X 4 + 
y 4 + Z 4 ) and = (l/3)(X 2 + Y 2 + Z 2 ). 

Let <3?* denote the map (fx* x <Py* x <-Pz* from J to A and recall that <£* denotes the map 
(p x x (fy x ip* z from A to J. An easy computation shows that is multiplication by 2 on J. 

Thus the image under <]?* of a 2-torsion element of J is in the kernel of To complete the proof, 
we will show that (P\, P 2 , P3) £ A(K) is the image under of a 2-torsion point of J. 

Let £7i and U 2 be the Weierstrass points on C given in homogeneous coordinates [W : X : Y : Z] 
by [0 : C : C 2 : 1] an d [0 : C 2 : C : 1]) respectively, where ( = e 2?rl//3 . Note that U\ — U 2 represents 
a 2-torsion element of J. Under the specialization we have made, equation ([?]), which defines 
Fx, becomes v 2 = — 4y 4 — Ay 2 — 4, and in these (y,v) coordinates we have <px(Ui) = (C 2 >0) an d 
<fix{U 2 ) = (C, 0). The curve Ex, defined by equation (|8]), is given by y 2 = x 3 + 2x 2 — 3x, and under 
the isomorphism 

'iv — y 2 — 2 —2v — 2iy 2 — Af 



(y,v) 



2 ' s 

y y 



from Fx to Ex these two points on Fx map to (iy/3,2CVs) and (-iy/3, 2C 2 \/3), respectively. The 
difference of these two points on the elliptic curve Ex is equal to the 2-torsion point (1,0). Thus 
i fx*{U\ — U 2 ) = P\. By symmetry, we find that (py*(Ui — U 2 ) = P 2 and <pz*(Ui — U 2 ) = P3 as well, 
so (Pi, P 2 , P3) is in the image of J[2](K) under and hence in G'{K). It is in G{K) as well, so 
G' = G and the proposition is proved. □ 



Proposition 15. Let notation be as before Proposition 14, and suppose Let C be the plane 

quartic over k defined by 



P1X 4 + B 2 Y* + + dX 2 Y 2 + eX z Z z + fY z Z z = 



-2 v 2 



where 



, 1 / „ „ A>P 



1 



-Aii4a + 



MR 



. 1 / . . ^iP\ 



Zet k 1 be the field k(vT). Then the polarized Jacobian of Cy is isomorphic to the polarized variety 
Ak'/Gk'- 

Proof. We leave it to the reader to show that an equation of the form 

aX 4 + bY* + cZ 4 + dX 2 Y 2 + eX 2 Z 2 + fY 2 Z 2 = 
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defines a non-singular curve if and only if the seven numbers a, b, c, d 2 — Aab, e 2 — Aac, f 2 — Abe, 
and af 2 + be 2 + cd 2 — Aabc — def are nonzero. In our case, these numbers are B\, B 2 , B 3 , TR/AA3, 
TR/4,A 2 , TR/4Ai, and T 2 /16, which are all nonzero. Thus our C is a non-singular curve of genus 3. 



As in the proof of Proposition 14, we quickly reduce to the universal case. This time, that means 



that the di and the A, are indeterminates, that £ is the field 

Q(rfi,d2,d 3 , Ai, A 2 , A 3 ), 

that 

A% = Ajdj 

B l = (A 2 -d 2 )/4 

Q l = (0,0) 

P, = {-{di + Ai) /2,0) 
R = did 2 dz, 

and that k is the proper subfield Q(A 1 ,A 2 ,A 3 ,B 1 ,B 2 ,B 3 ,R) of £. Let £' = £(VT); note that 
k' = k{yT) is a proper subfield of £' because it contains none of the d{. 

Let ix be the involution X ^ —X of Cy and let (fx '■ Cfc' — > be the double cover induced 
by tx- To find a model for the curve Fx over k', we dehomogenize the equation for C by letting 
x = X/Z and y = Y/Z; then, setting u = x 2 , we find the model 

SiU 2 + £2/ + £3 + duy 2 + eu + fy 2 = 

for Fx- If we let u = 2B\u + dy 2 + e and simplify, we get the model 

v 2 = (d 2 - 4,B 1 B 2 )y i + (2de - AB^)y 2 + (e 2 - 4Bi5 3 ). 



Example 3.7 (pp. 293-294) of |36| shows that the Jacobian Ex of Fx is the elliptic curve over k' 
defined by y 2 = x 3 +A x x 2 + B x x, where A x = 2B 1 f-de and B x = B 1 (B 1 f 2 + B 2 e 2 + B 3 d 2 -def- 
4BiB 2 B 3 ). Using the formulas for d, e, and / given in the proposition, we find that Ax = A\T/A 
and Bx = B\T 2 /16. Thus we see that Ex = i^uf , and the double cover (fx ■ Ck> — * Fx gives us a 
map </?3f from Si^/ to the Jacobian J of Ck 1 - 

If we define two more involutions ty and of C&/ in the obvious way, we get double covers 
ipy ■ Ck' — > Fy and (pz '■ Ck' — > -Fz that give rise to homomorphisms (fy ■ E 2 k> — > J and ^3 : E 3 k> —> 
./. 

Let /U be the canonical polarization of J and let A be the product polarization on A = E\xE 2 xE 3 . 
As in the proof of Proposition [14|, we get a commutative diagram 

Ay — ► Ah> 



J J 

where <3?* = (p* x x (fy x ip* z is an isogeny of degree 8 whose kernel C is a non-split maximal isotropic 
sub-group-scheme of Ak> [2] . Our task is to show that C = Gy ■ 

Let K be an algebraic closure of £'. Rationality arguments as in the proof of Proposition |l4| show 
that G'{K) contains the subgroup 

H = {(0, 0, 0), (0, Q 2 , Q 3 ), (Q u 0, Q 3 ), (Qi, Qa, 0)}, 

and, as before, to show that G'(K) = G{K) all we must do is show that the two groups contain a 
common element that is not in H. To show this, we once again specialize our universal example to 
a particular example. 
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Consider the specialization map I — * C that takes each dj to 4 and each Aj to —1/2; we will abuse 
notation by saying that d\ = 4, and so on. We see that each Ai = 2, each Pj = —3, each Aj = 16, 
each Pi = (—3,0), and T = —32. For each i, let Ri be the 2-torsion point (1,0) of Pj. Note that 
the Ei are the same as in the specialization at the end of the proof of Proposition [14|. From that 
proof, we know that the polarized quotient of A by the subgroup generated by H and (R%, R2, R3) 
is the Jacobian of a hyperelliptic curve. Since A/G' is the Jacobian of a plane quartic, Torelli's 
theorem shows that G'{K) cannot possibly contain (R\, R2, P3). The only possibility remaining is 
that G'(K) contains (Pi, P2, P3), which shows that G' = G and completes the proof. □ 



Remark. One might ask whether the base field extension to k{yT) is necessary for the proposition 
to be true. Indeed it is necessary. To see this, consider an arbitrary plane quartic C over k, let J 
be its polarized Jacobian, and let K be a separable closure of k. Since C is not hyperelliptic, we 
have an isomorphism Aut J = AutC x {±1} of Galois modules (where the Galois action on {±1} 
is trivial). Taking Galois cohomology, we find 

H l {KntJ) ^PT^AutC) x Hom(Gal (#/&), {±1}). 

The two H s catalog the twists of J and C, respectively, and the Horn catalogs field extensions of k 
of degree at most 2. Suppose J' is a quadratic twist of J corresponding to an element of H 1 (Aut J) 
that is trivial in if 1 (AutC) but nontrivial in the Horn. The curve over k that one obtains from J' 
is none other than C, and it takes a quadratic extension to make JacC isomorphic to J'. 



We can use Proposition 15 to give an example of a Jacobian of a curve over Q whose conductor, 



while not exactly small, is at least not so big. Recall that Mestre's result [31] implies that under 



standard conjectures the conductor of a 3-dimensional abelian variety over Q is at least 1100. 
Corollary 16. The conductor of the Jacobian of the curve 

2X 4 + 2Y 4 + 15Z 4 + 3X 2 Y 2 - 11X 2 Z 2 - \\Y 2 Z 2 = 

is 2940. 

Proof. Take E\ and E2 to be the curve y 2 = x 3 — llx 2 + 32x, which is isomorphic to the curve 14A4 
of ]|] and has conductor 14. Take P 3 to be the curve y 2 = x 3 — 31x 2 + 240x, which is isomorphic to 
the curve 15A3 of || an d has conductor 15. If we take Pi = P2 to be a nonzero 2-torsion point on 
E\ other than (0, 0), and if we take P3 to be (15, 0), then we find that the twisting factor is T = 32 2 . 



Applying Proposition 15 to these curves gives the curve in the statement of the corollary. □ 



4.2. Building hyperelliptic Jacobians — introduction. In the next few sections we will find 
triples (Ei, E2, E3) of elliptic curves over Q that have large rational torsion subgroups and for 
which we can choose 2-torsion points Pj and Qi that make the twisting factor equal to zero. Our 
strategy will be to specify the rational torsion structure on and determine the corresponding 
conditions on Ei and E2 that will make the twisting factor zero. We will not exhaust the possible 
combinations of torsion structures; the equations that arise become very messy very quickly, so we 
will only look at the cases where it seems likely that the solutions to the equations will be easy to 
find. 

Suppose we have three elliptic curves E\, E2, and P3 over a field k with each Ei defined by an 
equation y 2 = x(x 2 + AiX + Bi) and such that the product A1A2A3 is a square in k. For each i 
let Qi be the point (0,0) on Ei and let Pi be some other 2-torsion point on Ei, corresponding as in 



Section 4.1 to a square root di of Aj. We noted in the proof of Proposition 14 that the condition 



that the twisting factor be is equivalent to the condition that 



(9) A 3 = AiA 2 ± J(Af-l)(Al-l) 
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where Aj = Aj/dj. We can rewrite this equation in the equally useful form 

, x A 3 A^ 2 ± Ay/RJh 

d 3 did 2 

The fact that these equations hold precisely when T = will be the basis of all of our constructions 
of genus-3 hyperelliptic curves with large torsion subgroups. 

4.3. Building hyperelliptic Jacobians with E% of type (2,2). Suppose E% = -F| 2 , so that 
A% = — t — 1 and B3 = t. We have A3 = (t — l) 2 , so let us choose d% to be 1 — t. If E\ and E2 
are any elliptic curves over Q such that -B1-B2 and A1A2 are both squares, say A1A2 = r 2 and 
B1B2 = s 2 , then equation (|lC|) becomes 

t + 1 _ AiA 2 ± 4s 
t - 1 ~~ r 

This will have a rational nonzero solution for t as long as the right-hand side is neither 1 nor — 1. 
Thus, we need only search for pairs {Ei,E 2 ) such that B1B2 and A1A2 are both squares. 

Take E\ = F 2 and E2 = Fq. Then B\ = — 2 9 and Ai = 11 • 3 5 , and up to squares in Q(u) we 
have 

BxB2 = 2u 

AiA 2 = 33(9u + l)/{u + 1). 

Thus we would like to find rational solutions to the pair of equations u = 2v 2 and (9u + l)/(n + l) = 
33u> 2 . Solving the second equation for u gives u = (33w 2 — l)/(9 — 33w 2 ), and inserting this in the 
first equation and setting x = 2(9 — 33w 2 )v gives us 

x 2 = 2(33u> 2 - 1)(9 - 33-u; 2 ). 

This curve of genus 1 has a rational point (w,x) = (1/3, 16/3), and a calculation shows that it is 
birational with the elliptic curve 

y 2 = x ( x + 66)(x- 198). 

This elliptic curve has rank 2; its group of rational points is generated by its 2-torsion and the 
points (—44,484) and (—2, 160). Suppose C is the curve associated to one of these rational points 
via Proposition [l4] and our choice of the curves Ei . We leave it to the reader to show that the image 
of the rational torsion of E\ x E2 x £3 in the Jacobian of C is a group of the form Z/2Z x Z/30Z. 
Thus we have a family of hyperelliptic curves of genus 3, parameterized by the points on a positive 
rank elliptic curve, whose Jacobians contain a rational subgroup of the form Z/2Z x Z/30Z. 

Suppose we take E\ to be equal to E2. Then B1B2 and AiA 2 are automatically squares. In 
particular, if we take E\ = F^q, we find a 1-parameter family of hyperelliptic genus-3 curves whose 
Jacobians contain Z/10Z x Z/10Z. 

Suppose we take E\ = F% 2 and E2 = F% 2 - Then Ai and A2 are each squares in Q(u,v). To 
find values of u and v that make the product B1B2 a square, we must find rational solutions to the 
equation 

(u 2 -2u- l)(u 2 + 2u- l)w 2 = (v 2 -2v- l)(v 2 + 2v - 1). 

This equation defines an elliptic surface over Q(n) if we take the zero section to be (v, w) = (u, 1). 
Then the section (v, w) = (—u, 1) has infinite order. Thus we find a family of hyperelliptic genus-3 
curves, parameterized by the points on a positive rank elliptic surface, whose Jacobians contain a 
rational subgroup of the form Z/2Z x Z/8Z x Z/8Z. 

The groups we can obtain from other choices of E\ and E2 are subgroups of the groups we build 
in the next few sections. 
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4.4. Building hyperelliptic Jacobians with E$ of type (2, 4). Suppose now we take £ 3 = -F 2 * 4 , 
so that A 3 = 2t 2 + 2, B 3 = (t - l) 2 (t + l) 2 , and A 3 = IQt 2 . If we take d 3 = At, then equation (|TU|) 
becomes 

t 2 + l _ A X A 2 ± A^B^B 2 
2t ~ VATAa" 
Solving this quadratic equation for t, we find 

{A l ±2^B~ 1 ){A 2 ±2^W 2 ) 
VA1A2 

Thus, if Bi, B 2 , and A1A2 are all squares in Q, we can find a specialization of F 2 ± that will give 
us a twisting factor of 0. (Note that A{ 7^ ±2y/Bl since Ei is nonsingular, so the bad value t = 
in F24 is automatically avoided.) 

Suppose we take i?i = F$ and £2 = ^12- We check from Table |6] that B\ and B 2 are squares in 
Q(u,v), so all we must do is find values of u and v such that A1A2 is a square. Finding such u 
and v reduces to finding rational points on the surface S defined by 

{2u 2 - l)w 2 = (6v 2 -6v + l)(2v 2 -2v + 1). 

Let Y be the genus-0 curve 2i 2 — 1 = 41z 2 , and let E be the genus-1 curve 

41y 2 = (6v 2 -6v + l)(2v 2 - 2v + 1). 

We have a rational map Y x E — > 5 over Q mapping (t, z), (v,y) to (u,v,w) = (t,v,y/z). Since 
Y has the rational point (t, z) = (9/11,1/11), Y is isomorphic to P 1 over Q. Since E has the 
rational point (v,y) = (5,11), it is an elliptic curve over Q, and in fact it is isomorphic to y 2 = 

— 41x 2 + 1681a;. Moreover E has positive rank, since x = 81/121 gives a point of infinite order. 
Hence Y x E is a split elliptic surface over Pq of positive rank, and the points on this surface 
parameterize a family of hyperelliptic curves of genus 3 whose Jacobians contain groups isomorphic 
to Z/2Z x Z/2Z x Z/2Z x Z/24Z. 

Next we take E\ = and E 2 = F 2 g- We check that B±, B 2 , A\, and A2 are all squares in 
Q(u, v), so every pair of rational values of u and v will give us a rational values of t. This gives us 
a 2-parameter family of hyperelliptic curves of genus 3 whose Jacobians contain groups isomorphic 
to Z/2Z x Z/2Z x Z/2Z x Z/4Z x Z/8Z. 

Finally, if we take E\ = F^ 2 and E 2 = F^ 2 , we see that B\ and B 2 are squares. The condition 
that A1A2 be a square leads us to find rational solutions to the equation 

(6u 2 - 6u + l)(2u 2 - 2u + l)w 2 = (6v 2 - 6v + l)(2v 2 - 2v + 1). 

This equation defines an elliptic surface over Q(u) if we take the zero section to be (v,w) = (u, 1), 
and then the section (v, w) = {—u + 1, 1) has infinite order. Thus we find a positive rank elliptic 
surface whose points parameterize a family of hyperelliptic curves of genus 3 whose Jacobians 
contain groups isomorphic to Z/2Z x Z/2Z x Z/6Z x Z/12Z. 

4.5. Building hyperelliptic Jacobians with £3 of type (4, 2). Building hyperelliptic Jacobians 
by taking £"3 = F\ 2 is much more difficult than doing so by taking E 3 = F^, but it is possible. 
Here we have A3 = —t 2 — 6t — 1 and we may take d 3 = (t — l) 2 , so equation ( |i"0| ) becomes 

, v -t 2 -U- \ _ A X A 2 ± A^/B^ 

^ ' t 2 - 2t + 1 did 2 

Suppose we have chosen elliptic curves E\ and E 2 , and have calculated the right hand side of 
equation ([ll]) to get a number r. Solving for t, we find that we must have (r+l)t 2 +(2— 6r)i+(r+l) = 
0, and for t to be a rational number the discriminant of this quadratic must be a square, which 
reduces to the condition that 2(1 — r) be a square. 
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If we set E\ and E2 equal to some of our universal elliptic curves, the condition that 2(1 — r) be 
a square turns into an absolute mess that the reader should be thankful we do not go into here. 
However, in the special case where E\ = E2 and we take the plus sign in equation (fll]), we have 
r = 2\\- 1, so 2(1 - r) is a square precisely when 1 — X 2 is a square. A little algebra shows that 
this will be the case when — -B1A1 is a square. 

Suppose we take E\ = F|. Finding t such that — B\A.\ is a square is equivalent to solving the 
equation w 2 = 1 — 2t 2 . This equation defines a rational curve, so we obtain a 1-parameter family 
of hyperelliptic curves, and we compute that the rational torsion subgroup of the Jacobian of each 
of these curves contains a group isomorphic to Z/4Z x Z/4Z x Z/8Z. 

We can take E\ to be any of the other universal curves, but for most of the choices it is not 
possible to have — -B1A1 be a square, and for the others the groups we get are subgroups of groups 
that we have already obtained. 



4.6. Gaining 2-power torsion. We noted in Section [3/i] that the rational torsion subgroup of 
a quotient of an abelian variety is sometimes larger than the image of the rational torsion of the 
original variety. As in the genus-2 case, we can use this fact to increase the size of the torsion 
subgroups we can make. In order to do this, it will be useful to have some of the ideas used in 



Section 3/7 spelled out in more detail. 

Let k be a field with separable closure K and suppose E is an elliptic curve over k with #E[2](k) = 
4. Let y 2 = f(x) = (x — x s){x — xt)(x — xjj) be a model for E, and let S, T, and U be the 2-torsion 
points on E with x-coordinates xs, xt, and xjj, respectively. 

Lemma 17. Let notation be as above, and suppose W is an element of E{K) such that 2W = S. 
Then W can be defined over the field I = k(y/xs — xt, \/xs — x~u). Furthermore, the action of 
an element a of G&l(K/k) on W can be determined by its action on ^fx~s — xt and ^xs — xjj as 
follows: 

(a) If a fixes neither ^xs — xt nor \fx~s — x\j , then W a — W = S. 

(b) If a fixes \/x$ — xt but not \fx~s — xy, then W a — W = T. 

(c) If a fixes \/xs — xu but not y/x~s — xt, then W a — W = U. 



Proof. Under our assumptions, the /c-algebra L of Section |3.7| is isomorphic to k x k x k. The lemma 
then follows from the fact that the isomorphism 

H\G k ,E[2]) = ker [l*/L* 2 ^ k*/k* 2 ^ 

from [35 1 sends the image of S in if 1 (G/ c , E[2]) to the class of the element 

((x s - x T )(x s - xu), (x s - x T ), (xs - xu)). 

□ 

Using Lemma |l7] we can write down families of elliptic curves with specific rational torsion 
subgroups and extra 4-torsion over an extension that is at most quadratic. For instance, suppose 
we take E to be the universal curve F\^, with x$ = —(1 + t) 2 and xt = and xjj = —(1 — t) 2 . 
We see that xs — xt = — (1 + t) 2 and xs — xu = —4t. If we take t = —s 2 then xs — xu will be 
a square and xs — xt will be —1, up to squares, so for this choice of t there will be a point W of 
E defined over t = k(y/—l) such that 2W = S and such that W a — W = U for every non-trivial 
/c-automorphism a of £. With a little calculation we can find the coordinates for W. Putting this 
together with the information we have about F\ 4 from Tables |(| 0, and [|| gives us the information 
summarized in Table [9|. We will refer to the universal curve we have thus constructed as ^ a ■ 

We can use the curve to build Jacobians. Suppose we take E\ = E2, E% = i 7 !^, d\ = a\, 
and ds = 4s 2 . Then equation (||) gives us two possibilities: either A3 = 1, or A3 = 2Af — 1. The 
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Coefficients of model 
y 2 = x(x 2 + Ax + B) 
of universal curve 


A = 2(s 4 + 1) 

P = ( s 2 + l) 2 (s + l) 2 ( s -l) 2 
A = 16s 4 


rr-coordinates of 
2-torsion points 
S, T, U 


x s = -(s-l) 2 (s + l) 2 
x T = 

xu = -(s 2 + l) 2 


x- and ^-coordinates of a 
4-torsion point V with 2V = T 


xv-- ~{s 2 + + l)(a - 1) 
y v = 2(s 2 + l)( S + l)( S -l) 


x- and y-coordinates of a 
4-torsion point W with 2W = S 


X W r- _( S _l)( S+ l)( S _i)2 

y w = -2 S {s-l)(s + l)(s-i) 2 



Table 9. Data for the universal elliptic curve PJUa- Here i denotes a square root 
of —1. If a is a non-trivial element of Gal(fc(i)/fc), then W CT — W = U. 



former is impossible, because in that case x(x 2 + A 3 x + S3) would have a double root at 0. The 
latter becomes 

which can be solved to obtain s = ±Ai ± \/X 2 — 1, or 

±Ai ± 2 V A B7 



So suppose we take E\ = E2 = Pfg over fc = Q(tt). For this curve the numbers Pi and Ai are 
both squares in k, so we can set s to be an element of k that makes the twisting factor equal to 
zero. Thus we find a hyperelliptic curve C over k = Q(u) whose Jacobian is (2, 2, 2)-isogenous to 
E\X E\X E3. Given the choice of points Qi implicit in the above expressions, it is easy to calculate 
that the image of the known A;-rational torsion of E\ x E\ x E% in the Jacobian J of C is a group 
of the form Z/2Z x Z/2Z x Z/2Z x Z/4Z x Z/8Z. Now we will show that in fact J(k) contains a 
torsion group larger than this. 

Let Pi be the point on E\ with x = — 16u 4 and let R\ be the point with x = —(u — l) 4 (u + l) 4 
(see Table |8|). If we apply Lemma |17| to the curve E\, with S = P\ and T = Qi and U = R\, we 
find that there is a point W\ G E±(K) defined over an (at worst) biquadratic extension i of k with 
2W\ = P\. Note that xs — xt = — 16u 4 differs from —1 by a square, so k(i) C £ and the action of 
a a S Gal(£/A:) on y/x p ± — xq 1 is the same as its action on i. 

Let P3 be the point on E 3 with x = — (s 2 + l) 2 (see Table ||) and let W3 be the point labeled W 
in Table |9[ Let us consider how an element a of Gal acts upon the element (Wi, Wi, W3) of 
{Ei x Ei x £«})(£). If cr is not the identity and yet fixes i, then (Wi, Wi, W 3 ) a - (Wi,Wi, W 3 ) = 
(Qi, Qi, 0). If a does not fix i, then Wg CT - W 3 = P 3 and we see that (Wi, Wi, W 3 ) <T - (Wi, Wl, W 3 ) 
is either (Pi, Pi, P 3 ) or (i?i, Ri, P 3 ). Thus we see that (Wi, Wi, W 3 ) a - (W h Wi, W 3 ) is an element 
of the kernel G of E\ X £?i X E 3 — > J for every cr, so the image Z of (Wi, Wi, W3) in J is defined 
over k. Since 2(Wi,Wi,W3) = (Pi,Pi,P3) is in G, the point Z is a 2-torsion point. Finally, we 
note that (Wi, Wl, W3) does not differ by an element of G from any of the known rational torsion 
points of Ei x Ei x E 3 , so Z is not in the image of the known rational torsion of Ei x Ei x E 3 . 
Thus, the fc-rational torsion of the Jacobian of C contains a group isomorphic to Z/2Z x Z/2Z x 
Z/2Z x Z/2Z x Z/4Z x Z/8Z. Since A; is a rational function field over Q, we get a 1-parameter 
family of hyperelliptic curves of genus 3 having this group in their rational torsion subgroups. 
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4.7. Building Jacobians of plane quartics — introduction. Now we turn our attention to 
the task of building plane quartics whose Jacobians have large rational torsion subgroups. Most 
of the families we will construct will be produced by fixing the torsion structure of the curve E 3 
and analyzing the twisting factor as a function of the coefficients of E\ and Ei , but one interesting 
class of examples will arise by setting E\ = E2 = E 3 . Instead of trying to get the twisting factor to 
be zero, as we did in the last few sections, we will try to get the twisting factor to be a square, so 
that (by the final statement of Proposition 15) the product of the E{ will be isogenous over Q to 



the Jacobian of a curve. It will be convenient to use the second expression for the twisting factor, 
namely 

(12) T = d 1 d 2 d z (X\ + X 2 2 + X\ - 2AiA 2 A 3 - 1), 

where Aj = Ai/di. 

As in the hyperelliptic case, we will not examine all possible combinations of torsion structures 
on the curves Ei, E2, and E 3 here because of the complexity of the equations that arise. 

4.8. Building Jacobians of plane quartics with E 3 of type (4, 2). In this section we will take 
E 3 = F% 2 , so that A 3 = -t 2 - 6t - 1 and A 3 = (t - l) 4 . We will take d 3 = (t - l) 2 . 
Suppose we take E\ = E2 and d\ = d 2 . Then Ai = A2, and the twisting factor is 

T = d\d 3 (2X\ + \\- 2A 2 A 3 - 1) 
= A 1( f 3 (A 3 -l)(A 3 -2A 2 + l) 
= Ax(A 3 - 1)(A 3 - (2Xl ~ l)ds) 
= (A 3 -l)(AiA 3 - (2A 2 - Ai)d 3 ). 

A quick calculation shows that A 3 — 1 = —2(t + l) 2 /(i — l) 2 , so up to squares in Q(t) the twisting 
factor is 

AA\d 3 - 2^{A 3 + d 3 ) = 4(t - l) 2 A\ + 16fA x . 

To get the twisting factor to be a square, we need to find rational solutions to the equation 

w 2 = 4(t - l) 2 A\ + 16tAi. 

For fixed A\ and Ai, this last equation defines a curve of genus in the (t, iu)-plane, and since it 
has a rational point (namely (t,w) = (0, 2A\)) it is isomorphic to P 1 . We can parameterize the 
curve by setting 

t = (z + 4Bi)(z -A^/iAjz), 
w = 2(z 2 + 4B 1 A 1 )/(A 1 z). 

Suppose in particular we take E\ = F^ . Then we get a 2-parameter family (the parameters 
being u and z) of plane quartics whose Jacobians are isogenous to E\ x E\ x E 3 , and a simple 
computation with abelian groups shows that these Jacobians have a rational subgroup isomorphic 
to Z/10Z x Z/20Z. 

If we take E\ = Frfg we get a 2-parameter family of plane quartics whose Jacobians contain a 
rational subgroup isomorphic to Z/2Z x Z/4Z x Z/4Z x Z/8Z. If we take E\ = F% 2 we get a 
2-parameter family of plane quartics whose Jacobians contain a rational subgroup isomorphic to 
Z/2Z x Z/2Z x Z/8Z x Z/8Z. And if we take E 1 = Ff 2 we get a 2-parameter family of plane 
quartics whose Jacobians contain a rational subgroup isomorphic to Z/2Z x Z/12Z x Z/12Z. 

Without the assumption that E\ = Ei it is not as easy to make the twisting factor a square. 
But suppose we take E x = F w 1/2 and E 2 = F g 1/2 . Then A? = -625/2048 and X\ = -49/32, and 
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we can choose d\ and &i so that d\d 2 = 4 and A1A2 = 175/256. Then the twisting factor is 

V 2048 32 A 3 128 d 3 
_ -1922* 4 + 118024* 3 + 29940* 2 + 118024* - 1922 

~ 2 1 °(t-l) 2 ' 

so in order to make the twisting factor a square we must find rational solutions to the equation 

w 2 = -1922* 4 + 118024* 3 + 29940* 2 + 118024* - 1922. 

This last equation defines a curve of genus 1, and it has a rational point, namely (*, w) = (1,512). 
A calculation then shows that the curve is birational with the elliptic curve defined by y 2 = 
x 3 + 2565x — 15606. This happens to be the curve 528A2 in ||, which has rank 1. (The point 
(33,324) is of infinite order.) We see that there is a family of plane quartics, parameterized by the 
points on a positive rank elliptic curve, whose Jacobians contain a rational subgroup isomorphic to 
Z/4Z x Z/40Z. 

Now let us try taking E\ = F% 2 an d E 2 = Fq(^ ■ If we take d\ = 256 and d2 = 4 then we have 
Ai = 47/128 and A 2 = 863/512. The twisting factor is 

, , / 2209 744769 A\ 40561 A 3 

T = 1024d 3 + + -r 1 r~ ~ 1 

V 16384 262144 A 3 32768 d 3 

1104601* 4 + 2371804* 3 + 9824406* 2 + 2371804* + 1104601 
~ 2 8 (i-l) 2 ' 

so in order to make the twisting factor a square we must find rational solutions to the equation 

w 2 = 1104601t 4 + 2371804t 3 + 9824406t 2 + 2371804* + 1104601. 

The genus-1 curve defined by this equation has a rational point — namely, (t,w) = (1,4096) - 
so it is an elliptic curve. A calculation shows that it is birational with the elliptic curve y 2 = 
x 3 — 151563x + 10810438. Cremona's rank-finding program calculates that this elliptic curve has 
rank 2, and provides the two independent rational points (59, 1440) and (—157, 5544). Thus we have 
a positive rank elliptic curve whose points parameterize a family of plane quartics whose Jacobians 
contain a rational subgroup isomorphic to Z/2Z x Z/4Z x Z/24Z. 

Finally, let us take E l = F w 1/3 and E 2 = F^ 3 . Then A 2 = -485809/759375 and A 2 , = 
-3721/375, and we can choose d 1 and d 2 so that d x d 2 = 625/59049 and AiA 2 = -42517/16875. 
The twisting factor is 

625 , / 485809 3721 A 2 85034 ^3 



59049 V 759375 375 A 3 16875 d 3 
_ -177710460t 4 + 433908240i 3 + 216604440t 2 + 433908240* - 177710460 
~ 3 16 5 2 (i-l) 2 ' 

so in order to make the twisting factor a square we must find rational solutions to the equation 

w 2 = -177710460* 4 + 433908240* 3 + 216604440* 2 + 433908240* - 177710460. 

This genus-1 curve has rational points — for instance, (t,w) = (1,27000) — so it can be made 
into an elliptic curve. A calculation shows that the elliptic curve we get is isomorphic to the curve 
y 2 = x 3 + 213x — 30566. Cremona's rank-finding program says that this curve has rank 1, and gives 
the non-torsion point (53,360). Thus we have found a positive rank elliptic curve whose points 
parameterize a family of plane quartics whose Jacobians contain a rational subgroup isomorphic to 
Z/4Z x Z/60Z. 
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4.9. Building Jacobians of plane quartics with E 3 of type (2,4). In this section we will take 
£ 3 = F\ A , so that A 3 = 2t 2 + 2 and A 3 = I6t 2 . We will take d 3 = At. 

As we saw in the preceding section, if we take E\ = E2 and d\ = di then the twisting factor is 

r=(A 3 -l)(Aii43-(2A?-Ai)d 3 ). 
For our choice of E3 we have A3 — 1 = (t — i) 2 /(2t), so up to squares in Q(t) the twisting factor is 

(2i)(Ai(2i 2 + 2) - (2A 2 - Ai)(4t)) = 4t(Ai(t + l) 2 - AA 2 t). 
Thus, we would like to find rational solutions to the equation 
(13) w 2 = At{A 1 (t + l) 2 -AAjt). 

Suppose we take E\ = F$ 2 , so that A\ = 2 • 47 and Ai = 2 16 . Equation ( |l3|) becomes w 2 = 
At(2 16 (t + l) 2 - 2 4 47 2 t), and by setting s = 4096t and z = 5l2w we get 

z 2 = s 3 + 5983s 2 + 16777216s. 

A search for points on this curve using Cremona's programs comes up with the non-torsion point 
(s,z) = (5929/64,20520885/512). Thus we find a family of plane quartics, parameterized by the 
points on a positive rank elliptic curve, whose Jacobians contain a rational subgroup isomorphic to 
Z/4Z x Z/8Z x Z/8Z. 

Other choices for E\ lead to groups we have already constructed, most of them in the sections 
on hyperelliptic curves. 

4.10. Building Jacobians of plane quartics with E\ = E2 = E3. Suppose we take E\ = E2 = 
E 3 and d\ = CL2 = d 3 . Since A1A2A3 is supposed to be a square, we see that Ai must be a square 
and d\ must an element of the base field. If we write A and d for Ai and d\, we find that the 
twisting factor is 

T = d 3 (3X 2 - 2A 3 - 1) = -d 3 (\ - 1) 2 (2A + 1). 
Up to squares, then, the twisting factor is 

-d(2A + l) = -(2A + d), 

where we write A for A\. 

Suppose we take E 1 = F 2 \. Then A = -2t 4 + 12t 2 + 6 and we can take d = 16t. The twisting 
factor, up to squares, is t 4 — 6t 2 — 4t — 3, so we would like to find rational solutions to 

w 2 = t A - 6t 2 -it -3. 

The desingularization of this genus-1 curve has rational points at infinity, so it is an elliptic curve. 
A calculation shows that it is isomorphic as an elliptic curve to y 2 = x 3 — 48. This is the curve 
243A1 in ||; it has rank 1, and its group of rational points is generated by the point (4,4). Thus 
we find a positive rank elliptic curve whose points parameterize a family of plane quartics whose 
Jacobians contain a rational subgroup isomorphic to Z/6Z x Z/6Z x Z/6Z. 

Taking E\ to be F 24: or F\ 2 gives us rational subgroups that we can get in other ways, and 
taking E\ to be E\ 8 or E\ 2 leads to equations with no rational solutions. 

4.11. Gaining 2-power torsion. In this section we will show how to further specialize two of the 
families we wrote down in the last few sections to obtain larger rational torsion subgroups. For the 
first example, we will need to write down the universal curve F 2 4a in a slightly different form. All 
we would like to do is make a change of variables in the equation for F 2 4a so that the point labeled 
S in Table || will have x-coordinate 0. After translating x by the proper amount to do this, we 
obtain a curve that we will call Fl 2a . All the information we will need about this curve is listed in 

Table [n]. Note that F£ 2a is a specialization of F\ 2 , as the notation suggests. In fact, Fl 2a = F^ 2 . 
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Coefficients of model 
y 2 = x (x 2 + Ax + B) 
of universal curve 


A = -(s 2 -2s- l)(s 2 + 2s - 1) 
B = -4s 2 (s- l) 2 (s + l) 2 
A = (s 2 + l) 4 


x-coordinates of 
2-torsion points 
S, T, U 


x s = 

x T = ( s + l) 2 ( s -l) 2 
xjj = -4s 2 


x- and y-coordinates of a 
4-torsion point V with 2V = T 


x v - -2(s + l)(s-l) 

y v = 2(s 2 + l)(s + l)(s-l) 


x- and y-coordinates of a 
4-torsion point W with 2W = S 


xw = 2is(s + l)(s — 1) 

y w = -2s(s + l)(s-l)(s-i) 2 



Table 10. Data for the universal elliptic curve Fl 2a - Here i denotes a square root 
of —1. If a is a non-trivial element of G&l(k(i)/k), then W a — W = U. 



Now suppose we try to build a plane quartic by taking E\ = Ei = F^g and £3 = i^a- For 
notational convenience, we denote by t the number — s 2 , so that £3 = -F| 2 as well. Let P\ be 
the 2-torsion point on E\ with x = — 16u 4 and let P3 be the point labeled U in Table 1C, so that 
d 3 = (t- l) 2 = (s 2 + l) 2 . 

As we noted in Section |4^, the twisting factor in this situation is equal to 

4(t - l) 2 A\ + 16tAi = 4(s 2 + l) 2 A\ - 16s 2 Ai, 

up to squares, so we would like to find solutions to 

w 2 = ( s 2 + l) 2 ^ 2 -4s 2 Ai. 

For fixed A\ and A 1; this is a genus-1 curve in the (s, w)-plane whose desingularization has rational 
points at infinity, so it is isomorphic to its Jacobian, which (according to the formulas in Example 
3.7 (pp. 293-294) of f3(§) is given by 

y 2 = x (x + Ai)(x - 4Bi). 

If we take u = 2 then this curve is given by y 2 = x(x + 30625) (x — 82944) and has a non-torsion 
point (—21600,4514400). Thus, for this choice of u there are infinitely many values of s S Q that 
make the twisting factor a square. 

Let C be the plane quartic associated to one of these choices. Let A be the abelian variety 
E\ x Ei x E3 and let G be the kernel of the homomorphism tjj from A to the Jacobian J of C. The 
image under ip of the known rational torsion of A is a rational torsion subgroup of J isomorphic 
to Z/2Z x Z/4Z x Z/4Z x Z/8Z. Note that the number of independent (Z/4Z)-factors contained 
in this group is as large as is allowed by the restrictions imposed by the Galois-equivariance of the 
Weil pairing. However, there is more rational torsion on J than just this. 

Let i?i be the 2-torsion point on Ei with x = — (u — l) 4 (u+l) 4 (see Tabled). Applying Lemma [l7| 
to the curve Ei, taking S = Pi and T = Qi and U = Ri, we find that there is a point W\ € Ei(K) 
defined over a Galois extension £ of Q with 2Wi = P\. Since x$ — xt = — 16ti 4 we see that I 
contains Q(i); furthermore, if a is any automorphism of t that fixes i then W[ — Wi is either or 
Qi, while if a does not fix i then W" — W\ is either Pi or R\. 

Let W3 be the point on E3 labeled W in Table [R]. The point W3 is defined over Q(i), and if 
a is the non-trivial automorphism of Q(i) then W3 — W3 = P3. Knowing the Galois action on 
W\ and W3, one can check quite simply that (Wi, Wi, W3Y — (Wi,Wi, W3) is an element of G for 
every a E Ga\(K/Q). Thus the image Z of (Wi, W\, W3) in J is a rational point. It is certainly 
not one of the points we already calculated because (W\, W\, W3) does not differ from one of the 
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known rational points of A by an element of G. However, 2Z is one of the points we previously 
calculated, and indeed 2Z is a 2-torsion point. As remarked before, the torsion subgroup cannot 
contain (Z/4Z) n for n > 3, so the only possibility is that J contains a rational torsion subgroup 
isomorphic to Z/2Z x Z/2Z x Z/4Z x Z/4Z x Z/8Z. 

We end by trying to add 2-power torsion to the family of curves we obtained in the preceding 
section by taking E\ = E% = E% = F^q- Since the three elliptic curves are isomorphic to one 
another, we drop the subscripts. Recall that we chose d = 16i. This corresponds to choosing P to 
be the 2-torsion point on E with x-coordinate equal to (t — 3)(t + l) 3 . Let R be the 2-torsion point 
on E with ^-coordinate (t + 3)(i — l) 3 . Of course, Q is the point (0, 0) on E. 

Suppose we can find a value of t £ Q that makes the twisting factor a square and that equals 
(3 + s 2 )/(l — s 2 ) for some s £ Q. Then the ^-coordinate of P will be a square, and if we apply 
Lemma [17] to E, taking S = P and T = Q and U = R, we find that there will be point W on E 
defined over a quadratic extension £ of Q such that 2W = P and W a — W = Q for the non-trivial 
element of Gal(^/Q). Let C be the plane quartic corresponding to this hypothetical t, and let 
ip: ExExE^Jbe the map to the Jacobian of C with kernel G generated by (0, Q, Q), (Q, 0, Q), 
and (P, P, P) . The image under ip of the rational torsion of E x E x E is a group isomorphic 
to Z/6Z x Z/6Z x Z/6Z, but there is still more rational torsion on J. For consider the element 
Yy = (W, W, 0) ofBxExE: since Yf -Yy = (Q, Q, 0) is in G, we see the image of Yy in J is 
a rational point Z\. Similarly, the image Z2 of Yi = (W, 0, W) is a rational point. Since neither 
2Yi nor 2Y2 is in G, while both 4Yi and AY2 are zero, we see that Z\ and Z2 are 4-torsion points. 
Moreover, they are independent 4-torsion points, because neither 2{Y\ + Y2) nor 2{Y\ + 3I2) is in 
G. Thus J contains a rational torsion subgroup isomorphic to Z/6Z x Z/12Z x Z/12Z. 

To find such a curve C, we must find a value of s such that t = (3 + s 2 )/(l — s 2 ) will make the 
twisting factor a square. From the preceding section, we know that the twisting factor will be a 
square if there is aw such that 

w 2 = t 4 - 6t 2 -At -3. 

Inserting our formula for t into this equation and clearing denominators shows that we want to find 
solutions to 

y 2 = -s 8 + 6s 4 + 56s 2 + 3, 

with s 7^ ±1. Amazingly enough, there are such solutions to this equation: we can take (s,y) = 
(±1/5, 1432/625). These solutions give t = 19/6. Inserting the corresponding values for A, B, and 
A into the formulas of Proposition |l5| leads us to the plane quartic C defined by 

15625(X 4 + Y 4 + Z 4 ) - 96914(X 2 y 2 + X 2 Z 2 + Y 2 Z 2 ) = 0. 

The Jacobian of this curve contains a rational torsion subgroup of order 6 • 12 • 12 = 864. Both E 
and C have good reduction modulo 7; since the reduction E' of E modulo 7 has 12 points (12 being 
the only multiple of 12 lying within the Weil bounds), and since the reduction J' of the Jacobian of 
C is isogenous to E 1 x E' x E', we see that J' has 12 3 = 1728 points. Therefore the rational torsion 
subgroup of J is isomorphic either to Z/6Z x Z/12Z x Z/12Z, to Z/12Z x Z/12Z x Z/12Z, to 
Z/2Z x Z/6Z x Z/12Z x Z/12Z, or to Z/6Z x Z/12Z x Z/24Z. The second and third possibilities 
can be ruled out by looking at the action of Galois on the 4-torsion of E x E x E. The fourth can 
also be ruled out: the dual isogeny fy* : J — > E x E x E would take a 24-torsion point on J to a 
point of order at least 12 on E x E x E, since \J/*\&* is multiplication-by-2 on J, but the torsion 
subgroup of E x E x E is of exponent only 6. Thus, we have found a single plane quartic C such 
that the rational torsion subgroup of JacC is isomorphic to Z/6Z x Z/12Z x Z/12Z. 
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